sssd.git/src/providers, branch master

HBAC: remove misleading comment about deny rules

2015-10-08T18:46:13+00:00

HBAC deny rules are no longer supported. This comment should have
been removed as part of 'Remove HBAC DENY rules from SSSD'

https://fedorahosted.org/sssd/ticket/912

Reviewed-by: Michal Židek

AD: Consolidate connection list construction on ad_common.c

2015-10-07T10:42:03+00:00

Reviewed-by: Sumit Bose

AD: Provide common connection list construction functions

2015-10-07T10:42:03+00:00

https://fedorahosted.org/sssd/ticket/2810

Provides a new AD common function ad_ldap_conn_list() that creates a
list of AD connection to use along with properties to avoid mistakes
when manually constructing these lists.

Reviewed-by: Sumit Bose

DYNDNS: improve nsupdate_msg_add_fwd()

2015-10-05T18:59:48+00:00

Update nsupdate_msg_add_fwd() to group commands by address family
processed IP address belongs to.

It's better to group removing old A addresses and adding new A
addresses in a single transaction. Same goes for AAAA addresses.

Separate transaction for A and AAAA addresses updates are important
because server might block updates for one of these families and thus
the update even for the non-blocked address family would unnecessarily
fail.

For more details please see:
https://fedorahosted.org/sssd/wiki/DesignDocs/DDNSMessagesUpdate

Resolves:
https://fedorahosted.org/sssd/ticket/2495

Reviewed-by: Jakub Hrozek

DYNDNS: use realm and server commands only as fallback

2015-10-05T18:59:44+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2495

Reviewed-by: Jakub Hrozek

PROXY: fix minor memory leak

2015-10-02T10:50:39+00:00

Reviewed-by: Pavel Březina

SDAP: fix minor memory leak

2015-10-02T10:50:37+00:00

Reviewed-by: Pavel Březina

IPA: fix minor memory leak

2015-10-02T10:50:33+00:00

Reviewed-by: Pavel Březina

AD: fix minor memory leak

2015-10-02T10:50:26+00:00

Reviewed-by: Pavel Březina

SDAP: Relax POSIX check

2015-10-02T10:38:18+00:00

Relax the check on UID or GID just to check if at least one of them is
present but do not require them to be positive numbers.

Add requirement on objectclass attributes to be user or group to make
check more reliable.

Resolves:
https://fedorahosted.org/sssd/ticket/2800