sssd.git - sssd with jhrozek's patches

	Commit message (Collapse)	Author	Age	Files	Lines
*	LDAP: Check all search bases during nested group processing	Jakub Hrozek	2013-10-30	1	-13/+42
\|
*	nested groups: pick correct domain for cache lookups	Pavel Březina	2013-10-30	1	-4/+12
\| \| \| \| \| \| \| \| \|	Groups may contain members from different domains. We need to make sure that we always choose correct domain for subdomain users when looking up in sysdb. Resolves: https://fedorahosted.org/sssd/ticket/2064
*	Fix formating of variables with type: size_t	Lukas Slebodnik	2013-09-11	1	-1/+1
\|
*	Fix czech specific character in my name	Pavel Březina	2013-09-02	1	-1/+1
\|
*	nested groups: do not expect any particular number of groups	Pavel Březina	2013-06-18	1	-19/+10
\|
*	nested groups: do not return ENOMEM if num_groups is 0	Pavel Březina	2013-06-18	1	-6/+10
\| \| \| \| \| \|	talloc_realloc(..., 0) calls talloc_free() and returns NULL. If we process group that contains only users, we errornously return ENOMEM.
*	nested groups: allocate more space if deref returns more members	Pavel Březina	2013-06-17	1	-0/+21
\| \| \| \|	https://fedorahosted.org/sssd/ticket/1894
*	LDAP: new SDAP domain structure	Jakub Hrozek	2013-06-07	1	-15/+22
\| \| \| \| \| \| \| \| \| \| \|	Previously an sdap_id_ctx was always tied to one domain with a single set of search bases. But with the introduction of Global Catalog lookups, primary domain and subdomains might have different search bases. This patch introduces a new structure sdap_domain that contains an sssd domain or subdomain and a set of search bases. With this patch, there is only one sdap_domain that describes the primary domain.
*	LDAP: Fix value initialization warnings	Lukas Slebodnik	2013-04-04	1	-1/+1
\|
*	refactor nested group processing: add new code	Pavel Březina	2013-04-02	1	-0/+2229
	https://fedorahosted.org/sssd/ticket/1784 1. initialization (main-req), returns members of input group 2. evaluate group members (group) 3. perform individual search (no-deref) or dereference attribute (deref) 4a. no-deref 1. perform a lookup depending on the type of the member object 2. all direct members are evaluated first 3. then we step down in nesting level and evaluate nested groups 4b. deref 1. perform a dereference lookup on member attribute 2. all direct members are evaluated first 3. then we step down in nesting level and evaluate nested groups Tevent request flow: main-req \| group \|------------------------\| no-deref deref \| \| \|----\|------\|---------\| \| user group unknown recurse recurse / \ \| \| \| ... \| \| \| ... user group group group