sssd.git - sssd with jhrozek's patches

	Commit message (Collapse)	Author	Age	Files	Lines
*	AD: Add ad_create_1way_trust_options	Jakub Hrozek	2015-06-14	1	-0/+74
\| \| \| \| \| \| \| \| \| \| \| \| \|	Related: https://fedorahosted.org/sssd/ticket/2638 For one-way trusts we can assume that AD domain is the same as the Kerberis realm. On the other hand, SASL realm and keytab path are specified, unlike two-way trusts that use the system keytab. Includes a unit test. Reviewed-by: Sumit Bose <sbose@redhat.com>
*	IPA/AD: Set up AD domain in ad_create_2way_trust_options	Jakub Hrozek	2015-06-14	1	-0/+7
\| \| \| \| \| \| \| \| \| \|	Related: https://fedorahosted.org/sssd/ticket/2638 Removed code duplication. Amends unit test to make sure we don't regress. Reviewed-by: Sumit Bose <sbose@redhat.com>
*	AD: Split off ad_create_default_options	Jakub Hrozek	2015-06-14	1	-0/+17
\| \| \| \| \| \| \| \| \|	Related: https://fedorahosted.org/sssd/ticket/2638 Make the function reusable and add a simple unit test. Reviewed-by: Sumit Bose <sbose@redhat.com>
*	AD: Rename ad_create_default_options to ad_create_2way_trust_options	Jakub Hrozek	2015-06-14	1	-22/+129
\| \| \| \| \| \| \| \| \|	Related: https://fedorahosted.org/sssd/ticket/2638 Better reflects what's going on in the function. Also adds a unit test. Reviewed-by: Sumit Bose <sbose@redhat.com>
*	AD: Always get domain-specific ID connection	Stephen Gallagher	2015-04-15	1	-0/+1
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	ad_get_dom_ldap_conn() assumed that ad_ctx->ldap_ctx always points at the LDAP connection for the primary domain, however it turns out that this is not always the case. It's currently unclear why, but this connection can sometimes be pointing at a subdomain. Since the value of subdom_id_ctx->ldap_ctx always points to the correct domain (including the primary domain case), there's no benefit to trying to shortcut to the ad_ctx->ldap_ctx when performing this lookup. This patch also makes a minor tweak to the tests so that the primary domain passes the sdap_domain_get() check for validity (since it needs to have a private member assigned). Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
*	tests: convert all unit tests to cmocka 1.0 or later	Jakub Hrozek	2015-03-11	1	-10/+12
\| \| \| \| \| \|	All tests now use the cmocka-1.0-compatible API. Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
*	TOOLS: Always debug to stderr	Jakub Hrozek	2014-07-09	1	-1/+1
\| \| \| \| \| \| \| \| \|	https://fedorahosted.org/sssd/ticket/2348 Programs that are supposed to only be executed on the foreground should log to stderr automatically. Reviewed-by: Michal Židek <mzidek@redhat.com>
*	AD: Enable fallback to LDAP of trusted domain	Jakub Hrozek	2013-12-19	1	-3/+4
\| \| \| \| \|	Since we have the LDAP port of a trusted AD GC always available now, we can always perform a fallback.
*	AD: Add a new option to turn off GC lookups	Jakub Hrozek	2013-12-19	1	-0/+20
\| \| \| \| \| \| \| \| \| \|	SSSD now defaults to using GC by default. For some environments, for instance those that don't or can't replicate the POSIX attributes to Global Catalog, this might not be desirable. This patch introduces a new option ad_enable_gc, that is enabled by default. Setting this option to false makes the SSSD contact only the LDAP port of AD DCs.
*	AD: Add a utility function to create list of connections	Jakub Hrozek	2013-12-19	1	-0/+221
	ad_id.c and ad_access.c used the same block of code. With the upcoming option to disable GC lookups, we should unify the code in a function to avoid breaking one of the code paths. The same applies for the LDAP connection to the trusted AD DC. Includes a unit test.