sssd.git/src/responder/pac, branch openssl

cache_req: switch to new code

2016-10-20T07:56:38+00:00

This patch switch the old switch-based cache req code to
the new plugin-based.

Reviewed-by: Jakub Hrozek

DP: Remove old data provider interface

2016-08-16T12:54:50+00:00

Reverse data provider interface is moved to a better location in
NSS responder. All responders now can have an sbus interface
defined per data provider connection. The unused old data provider
interface is removed.

Reviewed-by: Lukáš Slebodník

Responders: Make the client context more generic

2016-06-29T19:46:03+00:00

This is useufl to allow reusing the responder code with other protocols.
Store protocol data and responder state data behind opaque pointers and
use tallog_get_type to check they are of the right type.

This also allows to store per responder state_ctx so that, for example,
the autofs responder does not have to carry useless variables used only
by the nss responder.

Resolves:
https://fedorahosted.org/sssd/ticket/2918

Reviewed-by: Jakub Hrozek

RESPONDER: New interface for client registration

2016-06-20T12:48:47+00:00

This is just a beginning of new responder interface to data provider
and it is just to make the client registration work. It needs further
improvement.

The idea is to take the existing interface and make it work better
with further extensions of data provider. The current interface has
several disadvantages such as it is originally build only for
account requests and doesn't take different set of output parameters.
It also doesn't work well with integration into tevent-made responders.

Reviewed-by: Sumit Bose 
Reviewed-by: Jakub Hrozek 
Reviewed-by: Lukáš Slebodník

RESPONDER: Removing ncache from pac_ctx

2016-05-11T11:43:12+00:00

This patch switches ncache from pac_ctx to resp_ctx.

Reviewed-by: Pavel Březina

RESPONDER: Removing neg_timeout from pac_ctx

2016-05-11T10:51:55+00:00

It removes neg_timeout parameter from pac responder. Timeout is handled
by internall structure of negative cache.

Resolves:
https://fedorahosted.org/sssd/ticket/2317

Reviewed-by: Pavel Březina

RESPONDER: Removing neg_timeout from pam responder

2016-05-11T10:50:25+00:00

It removes neg_timeout parameter from struct pam_ctx. Timeout is
handled by context of negative cache internally.

This patch additioanlly removes neg_timeout from struct cache_req_state.

Resolves:
https://fedorahosted.org/sssd/ticket/2317

Reviewed-by: Pavel Březina

NEGCACHE: Adding timeout to struct sss_nc_ctx

2016-05-11T10:49:45+00:00

It adds timeout of negative cache to handling
struct sss_nc_ctx.

There is one change in API of negatice cache:
 * int sss_ncache_init(TALLOC_CTX *memctx,
                       uint32_t timeout,  <----- new
                       struct sss_nc_ctx **_ctx);

There is also one new function in common/responder:
*  errno_t responder_get_neg_timeout_from_confdb(struct confdb_ctx *cdb,
                                                 uint32_t *ncache_timeout);

Resolves:
https://fedorahosted.org/sssd/ticket/2317

Reviewed-by: Pavel Březina

PAC: only save PAC blob into the cache

2016-04-13T08:43:19+00:00

Resolves https://fedorahosted.org/sssd/ticket/2158

Reviewed-by: Pavel Březina

responders: reset ncache after domains are discovered during startup

2015-04-09T06:35:23+00:00

After responders start, they add a lookup operation that discovers the
subdomains so that qualifying users works. After this operation is
finishes, we need to reset negcache to allow users to be added into the
newly discovered domains.

Reviewed-by: Lukáš Slebodník