sssd.git/src/config/SSSDConfigTest.py, branch review System Security Services Daemon [okos' clone] A new option krb5_use_kdcinfo 2013-06-10T19:03:01+00:00 Jakub Hrozek jhrozek@redhat.com 2013-06-07T09:28:35+00:00 14452cd066b51e32ca0ebad6c45ae909a1debe57 https://fedorahosted.org/sssd/ticket/1883 The patch introduces a new Kerberos provider option called krb5_use_kdcinfo. The option is true by default in all providers. When set to false, the SSSD will not create krb5 info files that the locator plugin consumes and the user would have to set up the Kerberos options manually in krb5.conf 
https://fedorahosted.org/sssd/ticket/1883

The patch introduces a new Kerberos provider option called
krb5_use_kdcinfo. The option is true by default in all providers. When
set to false, the SSSD will not create krb5 info files that the locator
plugin consumes and the user would have to set up the Kerberos options
manually in krb5.conf
back end: add refresh expired records periodic task 2013-06-10T18:30:57+00:00 Pavel Březina pbrezina@redhat.com 2013-05-13T08:30:48+00:00 0cf0e2d758d09e9b314ba72ce6638df10b258462 https://fedorahosted.org/sssd/ticket/1713 Add new option refresh_expired_interval. 
https://fedorahosted.org/sssd/ticket/1713

Add new option refresh_expired_interval.
Add a domain config attribute for realmd 2013-05-23T17:55:43+00:00 Stef Walter stefw@redhat.com 2013-05-23T15:41:51+00:00 21d89c38f22bf3b0c013b72988484c73db6ccecb realmd needs to be able to tag various domains with basic info when it configures a domain. 
realmd needs to be able to tag various domains with basic info
when it configures a domain.
Add 'description' attribute to SSSDConfig API 2013-05-23T15:06:23+00:00 Stephen Gallagher sgallagh@redhat.com 2013-05-23T12:10:25+00:00 7c100872c56b3bc0bd820e600fefbcfedf179283 It was mentioned in the manpages, but not accepted by the API 
It was mentioned in the manpages, but not accepted by the API
dyndns: new option dyndns_auth 2013-05-03T18:25:46+00:00 Jakub Hrozek jhrozek@redhat.com 2013-04-16T13:11:38+00:00 e15a9f81eb33066937710d7dee6976a3646d119c This options is mostly provided for future expansion. Currently it is undocumented and both IPA and AD dynamic DNS updates default to GSS-TSIG. Allowed values are GSS-TSIG and none. 
This options is mostly provided for future expansion. Currently it is
undocumented and both IPA and AD dynamic DNS updates default to
GSS-TSIG. Allowed values are GSS-TSIG and none.
dyndns: new option dyndns_force_tcp 2013-05-03T18:25:46+00:00 Jakub Hrozek jhrozek@redhat.com 2013-04-16T12:19:15+00:00 e45b81abe0aafa8a04bd64ac31a2fac63ce675b7 https://fedorahosted.org/sssd/ticket/1831 Adds a new option that can be used to force nsupdate to only use TCP to communicate with the DNS server. 
https://fedorahosted.org/sssd/ticket/1831

Adds a new option that can be used to force nsupdate to only use TCP to
communicate with the DNS server.
dyndns: New option dyndns_update_ptr 2013-05-03T18:25:46+00:00 Jakub Hrozek jhrozek@redhat.com 2013-04-30T14:40:09+00:00 38ebc764eeb7693e0c4f0894d6687e54fbba871b https://fedorahosted.org/sssd/ticket/1832 While some servers, such as FreeIPA allow the PTR record to be synchronized when the forward record is updated, other servers, including Active Directory, require that the PTR record is synchronized manually. This patch adds a new option, dyndns_update_ptr that automatically generates appropriate DNS update message for updating the reverse zone. This option is off by default in the IPA provider. Also renames be_nsupdate_create_msg to be_nsupdate_create_fwd_msg 
https://fedorahosted.org/sssd/ticket/1832

While some servers, such as FreeIPA allow the PTR record to be
synchronized when the forward record is updated, other servers,
including Active Directory, require that the PTR record is synchronized
manually.

This patch adds a new option, dyndns_update_ptr that automatically
generates appropriate DNS update message for updating the reverse zone.

This option is off by default in the IPA provider.

Also renames be_nsupdate_create_msg to be_nsupdate_create_fwd_msg
dyndns: new option dyndns_refresh_interval 2013-05-03T18:25:46+00:00 Jakub Hrozek jhrozek@redhat.com 2013-04-09T15:40:40+00:00 5a4239490c7fb7d732180a9d40f27f0247c56631 This new options adds the possibility of updating the DNS entries periodically regardless if they have changed or not. This feature will be useful mainly in AD environments where the Windows clients periodically update their DNS records. 
This new options adds the possibility of updating the DNS entries
periodically regardless if they have changed or not. This feature
will be useful mainly in AD environments where the Windows clients
periodically update their DNS records.
Convert IPA-specific options to be back-end agnostic 2013-05-03T18:22:37+00:00 Jakub Hrozek jhrozek@redhat.com 2013-04-09T12:20:28+00:00 04868f1573f4b26ef34610b6d7069172f93bd8ab This patch introduces new options for dynamic DNS updates that are not specific to any back end. The current ipa dyndns options are still usable, just with a deprecation warning. 
This patch introduces new options for dynamic DNS updates that are not
specific to any back end. The current ipa dyndns options are still
usable, just with a deprecation warning.
SUDO: IPA provider 2013-05-03T17:59:40+00:00 Lukas Slebodnik lslebodn@redhat.com 2013-04-24T18:26:40+00:00 b24e4bec819b29f1ec8e77083d4e7610c5dd9c77 This patch added auto configuration SUDO with ipa provider and compat tree. https://fedorahosted.org/sssd/ticket/1733 
This patch added auto configuration SUDO with ipa provider and compat tree.

https://fedorahosted.org/sssd/ticket/1733