sssd.git/src/providers/ipa, branch openssl

IPA: Initialize a boolean control value

2016-10-04T19:56:31+00:00

without this patch, valgrind was reporting:
==30955== Conditional jump or move depends on uninitialised value(s)
==30955== at 0xDBBACC3: ipa_subdomains_slave_search_done (ipa_subdomains.c:1111)
==30955== by 0xE73B34D: sdap_search_bases_ex_done (sdap_ops.c:222)
==30955== by 0xE6FFA98: sdap_get_generic_done (sdap_async.c:1872)
==30955== by 0xE6FF4E2: generic_ext_search_handler (sdap_async.c:1689)
==30955== by 0xE6FF840: sdap_get_and_parse_generic_done (sdap_async.c:1797)
==30955== by 0xE6FEFB5: sdap_get_generic_op_finished (sdap_async.c:1579)
==30955== by 0xE6FB1D2: sdap_process_message (sdap_async.c:353)
==30955== by 0xE6FAD51: sdap_process_result (sdap_async.c:197)
==30955== by 0xE6FAA14: sdap_ldap_next_result (sdap_async.c:145)
==30955== by 0x8E157FF: tevent_common_loop_timer_delay (tevent_timed.c:341)
==30955== by 0x8E16809: epoll_event_loop_once (tevent_epoll.c:911)
==30955== by 0x8E14F09: std_event_loop_once (tevent_standard.c:114)
==30955==

Resolves:
https://fedorahosted.org/sssd/ticket/3213

Reviewed-by: Fabiano Fidêncio

Remove double semicolon at the end of line

2016-09-21T13:10:11+00:00

Reviewed-by: Pavel Březina

dyndns: fix typo and unify ipa with ad debug message when off

2016-08-30T12:30:53+00:00

Reviewed-by: Petr Čech 
Reviewed-by: Lukáš Slebodník

IPA: Parse qualified names when guessing AD user principal

2016-08-26T19:17:16+00:00

Most AD users store their UPN in an attribute. If they don't, or the sssd
was configured (typically in earlier versions to work around a bug) to not
look at the principal attribute, then sssd is supposed to guess
the attribute.

That currently doesn't work in 1.14, because the username is already
qualified and then we also append the realm name to it. We need to parse
the simple username from the qualified name first.

The issue can be reproduced simply by authenticating as the Administrator
account in IPA-AD trust setups.

Resolves:
https://fedorahosted.org/sssd/ticket/3127

Reviewed-by: Sumit Bose

Warn if IP address is used as option for ipa_server/ad_server

2016-08-16T18:21:29+00:00

GSSAPI is dependent on DNS with hostnames and we should warn about this.

Resolves:
https://fedorahosted.org/sssd/ticket/2789

Reviewed-by: Jakub Hrozek

failover: mark subdomain service with sd_ prefix

2016-08-16T12:39:15+00:00

Reviewed-by: Lukáš Slebodník 
Reviewed-by: Jakub Hrozek

IPA: Check the return value of sss_parse_internal_fqname

2016-08-08T14:35:15+00:00

We should fail the request if sss_parse_internal_fqname() fails.

Reviewed-by: Lukáš Slebodník

IPA: Changing of confusing debug message

2016-08-05T11:14:38+00:00

This debug message used to confuse our users. So this patch changes it.
Old version: "Trust direction of %s is %s\n"
New version: "Trust type of [%s]: %s\n"

Resolves:
https://fedorahosted.org/sssd/ticket/3090

Reviewed-by: Pavel Březina

LDAP/IPA: add local email address to aliases

2016-07-29T12:45:00+00:00

Adding email-addresses from the local domain to the alias names is
strictly not needed by might help to speed up lookups in the NSS
responder.

Reviewed-by: Jakub Hrozek

LDAP: new attribute option ldap_user_email

2016-07-29T12:44:44+00:00

Reviewed-by: Jakub Hrozek