sssd.git/src/db, branch token

DB: Add user/group lookup by SID

2013-08-28T11:04:25+00:00

sysdb_add_incomplete_group: store SID string is available

2013-08-19T20:32:34+00:00

During initgroups request we read the SID of a group from the server but
do not save it to the cache. This patch fixes this and might help to
avoid an additional lookup of the SID later.

fill_initgr: add original primary GID if available

2013-08-19T10:53:49+00:00

In some cases when MPG domains are used the information about the
original primary group of a user cannot be determined by looking at
the explicit group memberships. In those cases the GID related to the
original primary group is stored in a special attribute of the user
object.

This patch adds the GID of the original primary group when available and
needed.

Fixes https://fedorahosted.org/sssd/ticket/2027

sdap_save_user: save original primary GID of subdomain users

2013-08-19T10:53:49+00:00

If ID mapping is enabled we use magic private groups (MPG) for
subdomains, i.e. the UID and the primary GID of the user will have the
same numerical value. As a consequence the information about the
original primary group might get lost because neither in AD domains nor
on a typical UNIX system the user is an explicit member of it's primary
group.

With this patch the mapped GID or the original primary group is saved in
the cached user object under a new attribute.

Fixes https://fedorahosted.org/sssd/ticket/2027

Use functionm ldb_dn_get_linearized to format struct ldb_dn

2013-07-19T08:22:01+00:00

DB: sysdb_search_user_by_name: search by both name and alias

2013-07-09T12:27:27+00:00

Read mpg state for subdomains from cache

2013-06-28T18:20:59+00:00

The mpg flag will be read from the cache for subdomains and the domain
object will be created accordingly.

Save mpg state for subdomains

2013-06-28T18:20:59+00:00

The information of a subdomain will use magic private groups (mpg) or
not will be stored together with other information about the domain in
the cache.

Add support for new ipaRangeType attribute

2013-06-28T18:20:59+00:00

Recent versions of FreeIPA support a range type attribute to allow
different type of ranges for sub/trusted-domains. If the attribute is
available it will be used, if not the right value is determined with the
help of the other idrange attributes.

Fixes https://fedorahosted.org/sssd/ticket/1961

DB: Don't add invalid ranges

2013-06-09T11:58:18+00:00

https://fedorahosted.org/sssd/ticket/1816

When saving or updating ranges, skip those which are invalid (not
provided ipaNTTrustedDomainSID or ipaSecondaryBaseRID, or both provided
at the same time)