sssd.git, branch sid

t5

2013-08-21T15:11:36+00:00

Explanation

Resolves:
https://fedorahosted.org/sssd/ticket/XXXX

add group sid lookup

2013-08-21T13:21:13+00:00

Explanation

Resolves:
https://fedorahosted.org/sssd/ticket/XXXX

SDAP: save group objectSID when schema=AD

2013-08-20T13:06:58+00:00

The SID is needed to be stored even when id mapping is disabled

Resolves:
https://fedorahosted.org/sssd/ticket/1568 (part)

Enable removing nonexisting dn in sdap_handle_account_info

2013-08-07T22:52:02+00:00

Change was introduced in commit ca344fde

PAM: Set negcache if user is not found after provider check

2013-08-07T22:44:19+00:00

PAM: Check negcache when searching for fully qualified users, too

2013-08-07T22:44:19+00:00

NSS: Clear cached netgroups if a request comes in from the sss_cache

2013-08-07T22:38:31+00:00

In order for sss_cache to work correctly, we must also signal the nss
responder to invalidate the hash table requests.

https://fedorahosted.org/sssd/ticket/1759

NSS: allow removing entries from netgroup hash table

2013-08-07T22:38:31+00:00

There is a timed desctructor in the nss responder that, when the
entry timeout passes, removes the netgroup from the hash table while
the netgroup is freed. This patch adds a hash delete callback so that if the
netgroup is removed from the hash table with hash_delete, its hash table
pointer will be invalidated. Later, when the entry is being freed, the
destructor won't attempt to remove it from the hash table.

Fix memory context for hash entries

2013-08-07T22:30:57+00:00

In sdap_nested_group_populate_users() username and orignal_dn are
allocated on a temporary memory context. If the corresponding user is
not found in the cache both are added to a hash which is later on
returned to the caller. To avoid a use-after-free when the hash entries
are looked up both must be reassigned to the memory context of the hash.

add simple access provider init test

2013-08-07T11:18:22+00:00