sssd2.git/src/confdb, branch sssd-1-3

Add try_inotify option

2010-07-09T15:44:07+00:00

There are some special cases where inotify cannot be used, even if
the host OS claims that it is supported. In these cases, it should
be possible to explicitly disable the use of inotify.

https://fedorahosted.org/sssd/ticket/484

Add dns_discovery_domain option

2010-06-30T11:35:31+00:00

The service discovery used to use the SSSD domain name to perform DNS
queries. This is not an optimal solution, for example from the point of
view of authconfig.

This patch introduces a new option "dns_discovery_domain" that allows to set
the domain part of a DNS SRV query. If this option is not set, the
default behavior is to use the domain part of the machine's hostname.

Fixes: #479

Change default min_id to 1

2010-06-09T12:29:34+00:00

Also update manpage for min_id/max_id to be more clear about how
it relates to primary GID.

Skip empty attributes with warning

2010-06-09T12:29:34+00:00

Fixes: #488

Add dns_resolver_timeout option

2010-04-30T11:51:19+00:00

We had a hard-coded timeout of five seconds for DNS lookups in the
async resolver. This patch adds an option 'dns_resolver_timeout'
to specify this value (Default: 5)

Add userdel_cmd param

2010-04-06T18:33:43+00:00

Fixes: #231

Fix config file error message

2010-03-22T12:34:16+00:00

Add forgotten \n in DEBUG statements

2010-03-04T17:41:31+00:00

Logs from confdb with missing '\n' in the DEBUG statements annoyed me so
I decided to fix them. I also made a quick grep through the code and
found other places so I fixed them too.

Make confdb_init's confdb_location parameter const

2010-03-04T17:41:30+00:00

Better cleanup task handling

2010-02-23T21:16:25+00:00

Implements a different mechanism for cleanup task. Instead of just
deleting expired entries, this patch adds a new option
account_cache_expiration for domains. If an entry is expired and the last
login was more days in the past that account_cache_expiration, the entry is
deleted.

Groups are deleted if they are expired and and no user references them
(no user has memberof: attribute pointing at that group).

The parameter account_cache_expiration is not LDAP-specific, so that other
future backends might use the same timeout setting.

Fixes: #391