sssd.git/src/providers/ldap, branch token3

AD: Enable TokenGroups initgroups lookup

2013-09-11T16:03:53+00:00

This is first implementation of getting TokenGroups lookup working.

If all of the group SIDs that are fetched via the users TokenGroups
attribute are in sysdb, the membership is processed this way. If any of
the groups is missing in the cache, it falls back to rfc2307bis
initgroups lookup.

Resolves:
https://fedorahosted.org/sssd/ticket/1568

LDAP: Make sdap_add_incomplete_groups public

2013-09-11T16:03:53+00:00

Explanation

Resolves:
https://fedorahosted.org/sssd/ticket/XXXX

LDAP: move sdap_get_initgr_state structure to private header

2013-09-11T16:03:53+00:00

is_dn(): free dn

2013-09-10T15:37:26+00:00

Fix czech specific character in my name

2013-09-02T13:36:45+00:00

LDAP: Make sdap_id_setup_tasks reusable for subdomains

2013-08-28T16:06:57+00:00

Instead of always performing the setup for the main domain, the setup
can now be performed for subdomains as well.

LDAP: Make the cleanup task reusable for subdomains

2013-08-28T16:06:57+00:00

Instead of always performing the cleanup on the main domain, the task
now accepts a sdap_domain structure to perform the cleanup on. This
change will make the cleanup task reusable for subdomains.

LDAP: Make cleanup synchronous

2013-08-28T16:06:57+00:00

The LDAP cleanup request was asynchronous for no good reason, probably a
leftover from the days of async sysdb. This patch makes it sychronous
again, removing a lot of uneeded code.

LDAP: Convert enumeration to the ptask API

2013-08-28T16:06:57+00:00

https://fedorahosted.org/sssd/ticket/1942

Identity providers other than LDAP need to customize the enumeration in
different ways while sharing the way the task is scheduled etc. The
easiest way to accomplish it is to leverage the recently introduced
ptask framework.

LDAP: Move the ldap enum request to its own reusable module

2013-08-28T16:06:57+00:00

The LDAP enumeration was too closely tied to the LDAP identity provider.
Because some providers might need special handling such as refresh the
master domain record before proceeding with the enumeration itself, this
patch splits the request itself to a separate async request and lets the
ldap_id_enum.c module only configure this new request.

Also move the enum timestamp to sdap_domain to make the enum tracking
per sdap domain. The cleanup timestamp will be moved in another patch.