sssd.git/src/providers/data_provider.h, branch token3

Add two new request types to the data-provider interface

2013-05-02T17:33:56+00:00

The patch adds two new request types for SID related requests. The first
one is used if a SID is given and the corresponding object should be
found. The second one can be used if the SID for an object is requested
but it is not clear if the object is a user or a group.

Add secid filter to responder-dp protocol

2013-05-02T17:33:56+00:00

This patch add a new filter type to the data-provider interface which
can be used for SID-based lookups.

Init failover with be_res options

2013-04-03T12:42:00+00:00

Making the authtok structure really opaque.

2013-04-02T15:01:08+00:00

Definition of structure sss_auth_token was removed from header file
authtok.h and there left only declaration of this structure.
Therefore only way how to use this structure is to use accessory function from
same header file.

To creating new empty authotok can only be used newly created function
sss_authtok_new(). TALLOC context was removed from copy and setter functions,
because pointer to stuct sss_auth_token is used as a memory context.

All declaration of struct sss_auth_token variables was replaced with
pointer to this structure and related changes was made in source code.

Function copy_pam_data can copy from argument src which was dynamically
allocated with function create_pam_data() or zero initialized struct pam_data
allocated on stack.

https://fedorahosted.org/sssd/ticket/1830

Reusing create_pam_data() on the other places.

2013-04-02T15:01:08+00:00

Function create_pam_data() should be only one way how to create new
struct pam_data, because it also initialize destructor to created
object.

Change pam data auth tokens.

2013-01-10T17:24:59+00:00

Use the new authtok abstraction and interfaces throught the code.

Hook for mmap cache update on initgroup calls

2012-12-05T22:01:37+00:00

This set of functions enumerate the user's groups and invalidate them all
if the list does not matches what we get from the caller.

Hook to perform a mmap cache update from sssd_nss

2012-12-05T22:01:37+00:00

This set of functions enumerate each user/group from all domains
and invalidate any mmap cache record that matches.

Use an entry type mask macro to filter entry types

2012-12-04T11:58:22+00:00

Avoids hardcoding magic numbers everywhere and self documents why a
mask is being applied.

krb5_child: send back the client principal

2012-10-26T08:32:05+00:00

In general Kerberos is case sensitive but the KDC of Active Directory
typically handles request case in-sensitive. In the case where we guess
a user principal by combining the user name and the realm and are not
sure about the cases of the letters used in the user name we might get a
valid ticket from the AD KDC but are not able to access it with the
Kerberos client library because we assume a wrong case.

The client principal in the returned credentials will always have the
right cases. To be able to update the cache user principal name the
krb5_child will return the principal for further processing.