sssd.git, branch token3

AD: Enable TokenGroups initgroups lookup

2013-09-11T16:03:53+00:00

This is first implementation of getting TokenGroups lookup working.

If all of the group SIDs that are fetched via the users TokenGroups
attribute are in sysdb, the membership is processed this way. If any of
the groups is missing in the cache, it falls back to rfc2307bis
initgroups lookup.

Resolves:
https://fedorahosted.org/sssd/ticket/1568

LDAP: Make sdap_add_incomplete_groups public

2013-09-11T16:03:53+00:00

Explanation

Resolves:
https://fedorahosted.org/sssd/ticket/XXXX

LDAP: move sdap_get_initgr_state structure to private header

2013-09-11T16:03:53+00:00

is_dn(): free dn

2013-09-10T15:37:26+00:00

krb5: Fix warning sometimes uninitialized

2013-09-10T15:32:33+00:00

warning: variable 'ret' is used uninitialized whenever
'if' condition is false
    if (kerr) {
        ^~~~

DB: Rise search functions debug levels

2013-09-10T12:01:24+00:00

DB: Add user/group lookup by SID

2013-09-10T12:01:24+00:00

sysdb_search_group_by_gid: obtain gid instead of uid

2013-09-10T12:01:24+00:00

krb5: Remove unused helper functions

2013-09-09T19:11:46+00:00

these functions are not needed anymore.

Related:
https://fedorahosted.org/sssd/ticket/2061

krb5_child: Simplify ccache creation

2013-09-09T19:11:46+00:00

The containing ccache directory is precreated by the parent code,
so there is no special need to do so here for any type.
Also the special handling for the FILE ccache temporary file is not really
useful, because libkrb5 internally unlinks and then recreate the file, so
mkstemp cannot really prevent subtle races, it can only make sure the file is
unique at creation time.

Resolves:
https://fedorahosted.org/sssd/ticket/2061