sssd.git/src/providers/ldap, branch openssl

LDAP: Removing of member link from group

2016-10-14T18:40:45+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2940

Reviewed-by: Lukáš Slebodník 
Reviewed-by: Jakub Hrozek

Remove double semicolon at the end of line

2016-09-21T13:10:11+00:00

Reviewed-by: Pavel Březina

LDAP: Return partial results from adminlimit exceeded

2016-09-14T09:11:38+00:00

Resolves:
    https://fedorahosted.org/sssd/ticket/3185

Since commit c420ce830ac0b0b288a2a887ec2cfce5c748018c we try to move to
the next server on any error on the connection, which in case there is
only one server sends SSSD offline.

It's more graceful to try to process the results, same as we already do
with sizelimit exceeded.

Reviewed-by: Michal Židek 
Reviewed-by: Lukáš Slebodník

SDAP: Fix settig paging attribute in sdap_get_generic_ext_send

2016-09-13T14:02:23+00:00

We should set pagging flag in state and not in local
variable which is not read anywhere in the function.

Found by clang static analyzer.

Reviewed-by: Fabiano Fidêncio

sdap_initgr_nested_get_membership_diff: use fully-qualified names

2016-09-01T11:48:59+00:00

I think this is a leftover from the change to use fully-qualified names
in sysdb. To verify this you can create a nested group in IPA. Without
this patch the id command will only show the groups the user is a direct
member of. With the patch the indirect groups memberships should be
shown as well.

https://fedorahosted.org/sssd/ticket/3163

Reviewed-by: Jakub Hrozek

PROXY: Use right name in ldap filter

2016-08-30T08:44:52+00:00

We used internal fq name in ldap filter
with id_provider proxy to files and auth provider
ldap

[sssd[be[LDAP]]] [sdap_get_generic_ext_step]
    (0x0400): calling ldap_search_ext with
    [(&(uid=testuser1@ldap)(objectclass=posixAccount))][dc=example,dc=com].

Reviewed-by: Jakub Hrozek

LDAP: Fixing of removing netgroup from cache

2016-08-24T12:00:00+00:00

There were problem with local key which wasn't properly removed.
This patch fixes it.

Resolves:
https://fedorahosted.org/sssd/ticket/2841

Reviewed-by: Lukáš Slebodník

sdap: Skip exact duplicates when extending maps

2016-08-19T10:17:16+00:00

When extending map with entry that already
exists in the map in the exacty same form,
then there is no need to fail.

We should only fail if we try to
change purpose of already used sysdb
attribute.

Resolves:
https://fedorahosted.org/sssd/ticket/3120

Signed-off-by: Lukas Slebodnik 

Reviewed-by: Lukáš Slebodník 
Reviewed-by: Jakub Hrozek

LDAP: Log autofs rfc2307 config changes only with enabled responder

2016-08-17T15:12:35+00:00

grep -nE "0x0040" /var/log/sssd/sssd_example.com.log
361:(Tue Aug 16 13:04:04 2016) [sssd[be[example.com]]]
  [ldap_get_autofs_options] (0x0040): Your configuration uses the autofs
  provider with schema set to rfc2307 and default attribute mappings.
  The default map has changed in this release, please make sure
  the configuration matches the server attributes.

Reviewed-by: Petr Čech

LDAP: Adding SIGCHLD callback

2016-08-17T14:17:45+00:00

This patch adds SIGCHLD callback for ldap_child. So if timeout is
reached and ldap_child is terminated by handler we have debug message
about it.

Resolves:
https://fedorahosted.org/sssd/ticket/3106

Reviewed-by: Pavel Březina 
Reviewed-by: Jakub Hrozek