sssd.git/src/config/SSSDConfig/__init__.py.in, branch subdommem System Security Services Daemon [okos' clone] Add now options ldap_min_id and ldap_max_id 2013-06-28T18:20:59+00:00 Sumit Bose sbose@redhat.com 2013-06-12T10:17:08+00:00 eceefd520802efe356d413a13247c5f68d8e27c8 Currently the range for Posix IDs stored in an LDAP server is unbound. This might lead to conflicts in a setup with AD and trusts when the configured domain uses IDs from LDAP. With the two noe options this conflict can be avoided. 
Currently the range for Posix IDs stored in an LDAP server is unbound.
This might lead to conflicts in a setup with AD and trusts when the
configured domain uses IDs from LDAP. With the two noe options this
conflict can be avoided.
A new option krb5_use_kdcinfo 2013-06-10T19:03:01+00:00 Jakub Hrozek jhrozek@redhat.com 2013-06-07T09:28:35+00:00 14452cd066b51e32ca0ebad6c45ae909a1debe57 https://fedorahosted.org/sssd/ticket/1883 The patch introduces a new Kerberos provider option called krb5_use_kdcinfo. The option is true by default in all providers. When set to false, the SSSD will not create krb5 info files that the locator plugin consumes and the user would have to set up the Kerberos options manually in krb5.conf 
https://fedorahosted.org/sssd/ticket/1883

The patch introduces a new Kerberos provider option called
krb5_use_kdcinfo. The option is true by default in all providers. When
set to false, the SSSD will not create krb5 info files that the locator
plugin consumes and the user would have to set up the Kerberos options
manually in krb5.conf
back end: add refresh expired records periodic task 2013-06-10T18:30:57+00:00 Pavel Březina pbrezina@redhat.com 2013-05-13T08:30:48+00:00 0cf0e2d758d09e9b314ba72ce6638df10b258462 https://fedorahosted.org/sssd/ticket/1713 Add new option refresh_expired_interval. 
https://fedorahosted.org/sssd/ticket/1713

Add new option refresh_expired_interval.
Adding option to disable retrieving large AD groups. 2013-05-23T09:45:38+00:00 Lukas Slebodnik lslebodn@redhat.com 2013-05-14T16:00:10+00:00 6263578b03a52b3ec3a2e33e097554241780fc20 This commit adds new option ldap_disable_range_retrieval with default value FALSE. If this option is enabled, large groups(>1500) will not be retrieved and behaviour will be similar like was before commit ae8d047122c "LDAP: Handle very large Active Directory groups" https://fedorahosted.org/sssd/ticket/1823 
This commit adds new option ldap_disable_range_retrieval with default value
FALSE. If this option is enabled, large groups(>1500) will not be retrieved and
behaviour will be similar like was before commit ae8d047122c
"LDAP: Handle very large Active Directory groups"

https://fedorahosted.org/sssd/ticket/1823
dyndns: new option dyndns_auth 2013-05-03T18:25:46+00:00 Jakub Hrozek jhrozek@redhat.com 2013-04-16T13:11:38+00:00 e15a9f81eb33066937710d7dee6976a3646d119c This options is mostly provided for future expansion. Currently it is undocumented and both IPA and AD dynamic DNS updates default to GSS-TSIG. Allowed values are GSS-TSIG and none. 
This options is mostly provided for future expansion. Currently it is
undocumented and both IPA and AD dynamic DNS updates default to
GSS-TSIG. Allowed values are GSS-TSIG and none.
dyndns: new option dyndns_force_tcp 2013-05-03T18:25:46+00:00 Jakub Hrozek jhrozek@redhat.com 2013-04-16T12:19:15+00:00 e45b81abe0aafa8a04bd64ac31a2fac63ce675b7 https://fedorahosted.org/sssd/ticket/1831 Adds a new option that can be used to force nsupdate to only use TCP to communicate with the DNS server. 
https://fedorahosted.org/sssd/ticket/1831

Adds a new option that can be used to force nsupdate to only use TCP to
communicate with the DNS server.
dyndns: New option dyndns_update_ptr 2013-05-03T18:25:46+00:00 Jakub Hrozek jhrozek@redhat.com 2013-04-30T14:40:09+00:00 38ebc764eeb7693e0c4f0894d6687e54fbba871b https://fedorahosted.org/sssd/ticket/1832 While some servers, such as FreeIPA allow the PTR record to be synchronized when the forward record is updated, other servers, including Active Directory, require that the PTR record is synchronized manually. This patch adds a new option, dyndns_update_ptr that automatically generates appropriate DNS update message for updating the reverse zone. This option is off by default in the IPA provider. Also renames be_nsupdate_create_msg to be_nsupdate_create_fwd_msg 
https://fedorahosted.org/sssd/ticket/1832

While some servers, such as FreeIPA allow the PTR record to be
synchronized when the forward record is updated, other servers,
including Active Directory, require that the PTR record is synchronized
manually.

This patch adds a new option, dyndns_update_ptr that automatically
generates appropriate DNS update message for updating the reverse zone.

This option is off by default in the IPA provider.

Also renames be_nsupdate_create_msg to be_nsupdate_create_fwd_msg
dyndns: new option dyndns_refresh_interval 2013-05-03T18:25:46+00:00 Jakub Hrozek jhrozek@redhat.com 2013-04-09T15:40:40+00:00 5a4239490c7fb7d732180a9d40f27f0247c56631 This new options adds the possibility of updating the DNS entries periodically regardless if they have changed or not. This feature will be useful mainly in AD environments where the Windows clients periodically update their DNS records. 
This new options adds the possibility of updating the DNS entries
periodically regardless if they have changed or not. This feature
will be useful mainly in AD environments where the Windows clients
periodically update their DNS records.
Convert IPA-specific options to be back-end agnostic 2013-05-03T18:22:37+00:00 Jakub Hrozek jhrozek@redhat.com 2013-04-09T12:20:28+00:00 04868f1573f4b26ef34610b6d7069172f93bd8ab This patch introduces new options for dynamic DNS updates that are not specific to any back end. The current ipa dyndns options are still usable, just with a deprecation warning. 
This patch introduces new options for dynamic DNS updates that are not
specific to any back end. The current ipa dyndns options are still
usable, just with a deprecation warning.
DNS sites support - add AD SRV plugin 2013-05-02T14:48:12+00:00 Pavel Březina pbrezina@redhat.com 2013-04-16T13:41:33+00:00 a679f0167b646cffdae86546ed77e105576991b0 https://fedorahosted.org/sssd/ticket/1032 
https://fedorahosted.org/sssd/ticket/1032