sssd.git/src/lib, branch subdommem

idmap: add sss_idmap_domain_has_algorithmic_mapping

2013-06-28T16:57:24+00:00

With this call it can be checked if for a given domain algorithmic
mapping is available or if the ID must be read from an external source.
The default if an error occurs or no matching range was found is false,
i.e external mapping, to meet the requirements for simple LDAP based
domains where only external mapping is available.

Fixes https://fedorahosted.org/sssd/ticket/1960

idmap: add calls to check if ID mapping conforms to ranges

2013-06-28T16:57:23+00:00

When ID are mapped externally it must be checked if the extern ID falls
into the right configured range to avoid ID conflicts.

Fixes https://fedorahosted.org/sssd/ticket/1960

idmap: allow NULL domain sid for external mappings

2013-06-28T16:57:23+00:00

Since it is planned that the LDAP based ID providers (LDAP, AD, IPA)
will always use libsss_idmap to map ID or get information about how to
map it, it must be possible to add domains to libsss_idmap which do not
have a SID or where is SID is not known when external mapping is used.
Algorithmic mapping always requires a domain SID.

Fixes https://fedorahosted.org/sssd/ticket/1960

idmap: add option to indicate external_mapping

2013-06-28T16:57:23+00:00

The idea is that ranges for IDs from AD can be used in libsss_idmap as
well, but whenever a mapping is requested for this range a specific
error code IDMAP_EXTERNAL is returned to tell SSSD to do
an AD lookup. This way SSSD does not need to inspect the ranges itself
but all is done inside if libsss_idmap.

Fixes https://fedorahosted.org/sssd/ticket/1960

idmap: add optional unique range id

2013-06-28T16:57:23+00:00

To be able to detect configuration changes in idranges managed by
FreeIPA an identifier should be stored on the client together with the
other idrange related data.

Fixes https://fedorahosted.org/sssd/ticket/1979

idmap: allow first RID to be set

2013-06-28T16:57:23+00:00

Currently libss_idmap implicitly assumes that the RID 0 is always mapped
to the first ID of the given range. This is not the case anymore when
multiple ranges are used e.g. for trusted domains in FreeIPA.

A new call sss_idmap_add_domain_ex() was added which can take the first
RID as an argument. This new call will get more options with other
patches hence I didn't change the library version with this patch.

Fixes https://fedorahosted.org/sssd/ticket/1938

Fix some doxygen warnings

2013-06-11T12:41:44+00:00

IDMAP: Fix variable initialization

2013-05-03T10:21:50+00:00

Before the recent changes, the variable was set to 0 too because it used
to be part of a structure allocated with talloc_zero.

libsss_idmap: function to calculate range

2013-04-29T15:01:38+00:00

Calculation of range for domains is moved from
sdap_idmap code to sss_idmap code. Some refactoring
have been done to allow this move.

https://fedorahosted.org/sssd/ticket/1844

Fix potential out-of-bounds write in sss_idmap_sid_to_dom_sid

2013-04-03T11:26:41+00:00

https://fedorahosted.org/sssd/ticket/1861