sssd.git/src/providers/ad, branch token2

Fix czech specific character in my name

2013-09-02T13:36:45+00:00

SYSDB: Store enumerate flag for subdomain

2013-08-28T16:06:57+00:00

LDAP: Make sdap_id_setup_tasks reusable for subdomains

2013-08-28T16:06:57+00:00

Instead of always performing the setup for the main domain, the setup
can now be performed for subdomains as well.

DB: remove unused realm parameter from sysdb_master_domain_add_info

2013-08-28T16:05:02+00:00

The parameter was not used at all.

krb5: Fetch ccname template from krb5.conf

2013-08-28T09:00:03+00:00

In order to use the same defaults in all system daemons that needs to know how
to generate or search for ccaches we introduce ode here to take advantage of
the new option called default_ccache_name provided by libkrb5.

If set this variable we establish the same default for all programs that surce
it out of krb5.conf therefore providing a consistent experience across the
system.

Related:
https://fedorahosted.org/sssd/ticket/2036

AD: Use the correct include guard

2013-08-19T09:13:01+00:00

AD: Cast SASL callbacks to propper type

2013-08-09T16:06:29+00:00

The initialization of ad_sasl_callbacks raised an incompatible pointer
type warning. This was caused because the cyrus-sasl API hasa changed.
The callback function list needs to be cast now.

sssd_ad: Add hackish workaround for sasl ad_compat

2013-08-06T19:43:47+00:00

This tries to set the ad_compat option for sasl, by working around
the openldap/sasl initialization as openldap does not allow us to pass
down to sasl our own getopt callback.

Resolves:
https://fedorahosted.org/sssd/ticket/2040

KRB5: Do not send PAC in server mode

2013-07-23T12:18:03+00:00

The krb5 child contacts the PAC responder for any user except for the
IPA native users if the PAC is configured. This works fine for the
general case but the ipa_server_mode is a special one. The PAC responder
is there, but since in the server mode we should be operating as AD
provider default, the PAC shouldn't be analyzed either in this case.

AD: Set the bool value same as default value in opts

2013-07-19T11:51:17+00:00

https://fedorahosted.org/sssd/ticket/2023

When the option values are copied using dp_opt_copy_map, the .val member
is used if it's not NULL. At the same time, the bool options are never
NULL, unlike integers or strings that can have special NULL-like values
such as NULL_STRING. This effectively means that when copying a bool
option, the .val member is always used.

But in the AD maps, some .val fields were set differently from the
.def_val fields. The effect was that when the AD subdomain provider was
initialized from IPA subdomain provider using only the defaults, some
options (notably referral chasing) were set to a value that didn't make
sense for the AD provider.

This patch makes sure that for all boolean option, the .val is always
the same as .def_val.