sssd2.git/src/providers, branch master

Only check UPN if enterprise principals are not used

2013-05-03T19:02:10+00:00

If enterprise principals are enabled (which is the default in the AD
provider), then the returned UPN might be slightly different from
the one SSSD constructs before attempting the login. This patch makes
SSSD only check if the principal is the same when the enterprise
principals are disabled.

AD: Always initialize ID mapping

2013-05-03T19:02:04+00:00

Because we now always store SIDs in the LDAP provider, we also need to
always initialize the ID mapping context even if ID mapping itself is
off.

Active Directory dynamic DNS updates

2013-05-03T18:31:39+00:00

https://fedorahosted.org/sssd/ticket/1504

Implements dynamic DNS updates for the AD provider. By default, the
updates also update the reverse zone and run periodically every 24
hours.

Split out the common code from timed DNS updates

2013-05-03T18:31:38+00:00

dyndns: new option dyndns_auth

2013-05-03T18:25:46+00:00

This options is mostly provided for future expansion. Currently it is
undocumented and both IPA and AD dynamic DNS updates default to
GSS-TSIG. Allowed values are GSS-TSIG and none.

dyndns: new option dyndns_force_tcp

2013-05-03T18:25:46+00:00

https://fedorahosted.org/sssd/ticket/1831

Adds a new option that can be used to force nsupdate to only use TCP to
communicate with the DNS server.

dyndns: New option dyndns_update_ptr

2013-05-03T18:25:46+00:00

https://fedorahosted.org/sssd/ticket/1832

While some servers, such as FreeIPA allow the PTR record to be
synchronized when the forward record is updated, other servers,
including Active Directory, require that the PTR record is synchronized
manually.

This patch adds a new option, dyndns_update_ptr that automatically
generates appropriate DNS update message for updating the reverse zone.

This option is off by default in the IPA provider.

Also renames be_nsupdate_create_msg to be_nsupdate_create_fwd_msg

dyndns: new option dyndns_refresh_interval

2013-05-03T18:25:46+00:00

This new options adds the possibility of updating the DNS entries
periodically regardless if they have changed or not. This feature
will be useful mainly in AD environments where the Windows clients
periodically update their DNS records.

Convert IPA-specific options to be back-end agnostic

2013-05-03T18:22:37+00:00

This patch introduces new options for dynamic DNS updates that are not
specific to any back end. The current ipa dyndns options are still
usable, just with a deprecation warning.

Refactor dynamic DNS updates

2013-05-03T18:22:29+00:00

Provides two new layers instead of the previous IPA specific layer:
 1) dp_dyndns.c -- a very generic dyndns layer on the DP level. Its
 purpose it to make it possible for any back end to use dynamic DNS
 updates.
 2) sdap_dyndns.c -- a wrapper around dp_dyndns.c that utilizes some
 LDAP-specific features like autodetecting the address from the LDAP
 connection.

Also converts the dyndns code to new specific error codes.