sssd.git/src/providers/ipa, branch token3

Fix warning missing arguments

2013-09-05T09:09:56+00:00

Fix czech specific character in my name

2013-09-02T13:36:45+00:00

IPA_HBAC: Explicitelly include header file time.h

2013-08-28T20:02:49+00:00

struct hbac_eval_req is defined in header file and it has attribute
request_time with type time_t, but header file "time.h" was not included.
It was not problem, because time.h was indirectly included by stdlib.h
(stdlib.h -> sys/types.h -> time.h) in implementation files,
but other platforms can have other dependencies among header files.

IPA: Add forgotten declaration

2013-08-28T17:22:39+00:00

A conflict between two patches was not resolved correctly

IPA: enable enumeration if parent domain enumerates in server mode

2013-08-28T16:08:29+00:00

https://fedorahosted.org/sssd/ticket/1963

SYSDB: Store enumerate flag for subdomain

2013-08-28T16:06:57+00:00

LDAP: Make sdap_id_setup_tasks reusable for subdomains

2013-08-28T16:06:57+00:00

Instead of always performing the setup for the main domain, the setup
can now be performed for subdomains as well.

DB: remove unused realm parameter from sysdb_master_domain_add_info

2013-08-28T16:05:02+00:00

The parameter was not used at all.

ipa-server-mode: add IPA group memberships to AD users

2013-08-28T15:30:07+00:00

When IPA trusts an AD domain the AD user or groups can be placed into
IPA groups e.g. to put AD users under the control of HBAC. Since IPA
group can only have members from the IPA directory tree and the AD users
and groups are not stored there a special IPA object called external
group was introduced. SIDs of users and groups can be added to the
external group and since the external groups are in the IPA directory
tree they can be member of IPA groups.

To speed things up and to remove some load from the IPA servers SSSD
reads all external groups and stores them in memory for some time before
rereading the data.

Enhances https://fedorahosted.org/sssd/ticket/1962

IPA: Enable AD sites when in server mode

2013-08-28T14:19:51+00:00

https://fedorahosted.org/sssd/ticket/1964

Currently the AD sites are enabled unconditionally