summaryrefslogtreecommitdiffstats
path: root/src/providers/ldap/sdap_idmap.c
Commit message (Collapse)AuthorAgeFilesLines
* Fail with misconfigured id-mapping rangesOndrej Kos2013-05-271-1/+2
| | | | | | | | | | https://fedorahosted.org/sssd/ticket/1930 On misconfigured id-mapping range variables, the provider should not start. We were internally correctly setting error code for failure, but interruption of startup was not performed. Also raised the debug level of message for this misconfiguration.
* Re-add a useful DEBUG messageJakub Hrozek2013-05-131-0/+2
| | | | | | | In commit 46222e5191473f9a46aec581273eb2eef22e23be we removed a very similar DEBUG message while moving the whole piece of code to the idmap library. But it turned out that the DEBUG message was useful while testing the functionality, so this patch adds it back.
* libsss_idmap: function to calculate rangeMichal Zidek2013-04-291-107/+54
| | | | | | | | Calculation of range for domains is moved from sdap_idmap code to sss_idmap code. Some refactoring have been done to allow this move. https://fedorahosted.org/sssd/ticket/1844
* Remove sysdb as a be context structure memberSimo Sorce2013-01-211-2/+2
| | | | The sysdb context is already available through the 'domain' structure.
* Add domain argument to sysdb_idmap_ funcitonsSimo Sorce2013-01-151-1/+2
|
* idmap: Silence DEBUG messages when dealing with built-in SIDs.Michal Zidek2012-11-281-7/+18
| | | | | | | | When converting built-in SID to unix GID/UID a confusing debug message about the failed conversion was printed. This patch special cases these built-in objects. https://fedorahosted.org/sssd/ticket/1593
* Slices calculation is alway wrong for default valuesOndrej Kos2012-10-041-2/+2
|
* AD: autorid compatibility should recommend the use of default domainStephen Gallagher2012-09-241-4/+4
| | | | | | | | | | | Previously, we were failing to start if ldap_idmap_autorid_compat was True but the default domain SID was unspecified. This is the recommended configuration, but it is functional without it. There is just a slight risk that the IDs will be inconsistent between machines if the first user requested is not from the default domain. https://fedorahosted.org/sssd/ticket/1530
* LDAP: Add helper function to map IDsStephen Gallagher2012-05-031-0/+62
| | | | | This function will also auto-create a new ID map if the domain has not been seen previously.
* LDAP: Add routine to extract domain SID from an object SIDStephen Gallagher2012-05-031-0/+44
| | | | Also makes the domain prefix macros from sss_idmap public.
* LDAP: Allow setting a default domain for id-mapping slice 0Stephen Gallagher2012-05-031-0/+36
|
* LDAP: Add autorid compatibility modeStephen Gallagher2012-05-031-8/+14
|
* LDAP: Add helper routines for ID-mappingStephen Gallagher2012-05-031-0/+282