sssd.git/src/db/sysdb_search.c, branch openssl

views: properly override group member names

2016-07-29T12:44:28+00:00

Resolves https://fedorahosted.org/sssd/ticket/2948

Reviewed-by: Jakub Hrozek

SYSDB: Search functions don't need to construct per-domain names

2016-07-07T08:24:50+00:00

All user and group names are standardized to be fully qualified, so
there's no need to provide per-domain names anymore.

Reviewed-by: Jakub Hrozek

sysdb: Use ldb_result as output in sysdb_search_ts_{users,groups}

2016-07-06T15:27:30+00:00

Passing address of unsigned to the output argument size_t causes
access out of boundaries for type unsigned and and wrong data
on big endian. It looks like functions sysdb_search_ts_{users,groups}
need to store results in structure ldb_result anyway for further processing.
Therefore it will be better to convert output arguments
size_t* + ldb_message*** into structure ldb_result and avoid using
additional helper variable with type size_t before each invocation
of these functions.

Reviewed-by: Sumit Bose

SYSDB: If modifyTimestamp is the same, only update the TS cache

2016-06-23T11:47:07+00:00

Resolves:
    https://fedorahosted.org/sssd/ticket/2602

If the entry being saved contains the original modifyTimestamp attribute
and the modifyTimestamp attribute is the same as the one we already
saved to the timestamp cache, only the expire timestamps in the
asynchronous timestamp cache will be bumped and the sysdb code will
avoid writes to the main cache completely. If the modifyTimestamp is
either missing or differs, we assume the entry had changed and do a full
write to the main cache.

Also amends the generic sysdb_set_attrs* and similar functions that
their results is also reflected in the timestamps cache.

Reviewed-by: Sumit Bose

SYSDB: Search the timestamp caches in addition to the sysdb cache

2016-06-23T11:40:11+00:00

When a sysdb entry is searched, the sysdb cache is consulted first
for users or groups. If an entry is found in the sysdb cache, the
attributes from the timestamp cache are merged to return the full and
up-to-date set of attributes.

The merging is done with a single BASE search which is a direct lookup
into the underlying key-value database, so it should be relatively fast.
More complex merging is done only for enumeration by filter which is
currently done only via the IFP back end and should be quite
infrequent, so I hope we can justify a more complex merging there.

Reviewed-by: Sumit Bose

sysdb: add searches by certificate with overrides

2016-06-09T14:12:25+00:00

Reviewed-by: Jakub Hrozek

cache_req: add support for UPN

2015-10-08T17:56:26+00:00

Reviewed-by: Sumit Bose

views: allow ghost members for LOCAL view

2015-09-18T11:22:03+00:00

LOCAL view does not allow the case when both ghost member and
user override is created so it is safe to allow ghost members
for this view.

Resolves:
https://fedorahosted.org/sssd/ticket/2790

Reviewed-by: Sumit Bose

Update few debug messages

2015-07-17T08:58:52+00:00

It reduces a noise caused by canonicalization of non-existing user.

Resolves:
https://fedorahosted.org/sssd/ticket/2678

Reviewed-by: Pavel Reichl

SYSDB: Add functions to look up multiple entries including name and custom filter

2015-07-15T15:32:16+00:00

Related:
    https://fedorahosted.org/sssd/ticket/2553

Adds new sysdb function:
    - sysdb_enumpwent_filter
    - sysdb_enumpwent_filter_with_views
    - sysdb_enumgrent_filter
    - sysdb_enumgrent_filter_with_views

These are similar to enumeration functions, but optionally allow to
specify a filter to be applied on user/group names. Also an additional
custom filter can be applied.

Reviewed-by: Pavel Březina