sssd2.git/src/responder, branch master System Security Services Daemon [okos' clone] Add SID related calls to the NSS responder 2013-05-03T18:06:29+00:00 Sumit Bose sbose@redhat.com 2013-04-15T08:58:22+00:00 6eadbf9dab2ad9a9463dc23e91c9e2fc804c1e9b The patch adds 4 new calls to the NSS responder: - SSS_NSS_GETSIDBYNAME - SSS_NSS_GETSIDBYID - SSS_NSS_GETNAMEBYSID - SSS_NSS_GETIDBYSID to either return the SIDs of the requested object or map the SID to the name or the POSIX ID of the related object. 
The patch adds 4 new calls to the NSS responder:
- SSS_NSS_GETSIDBYNAME
- SSS_NSS_GETSIDBYID
- SSS_NSS_GETNAMEBYSID
- SSS_NSS_GETIDBYSID
to either return the SIDs of the requested object or map the SID to the
name or the POSIX ID of the related object.
Add sss_ncache_set_sid() and sss_ncache_check_sid() 2013-05-02T17:33:56+00:00 Sumit Bose sbose@redhat.com 2013-04-22T14:26:56+00:00 b5afbc39c09baaef57b5300b636307e277c59d66 Two new calls are added to allow to add SID based lookups to the negative cache. 
Two new calls are added to allow to add SID based lookups to the
negative cache.
Add responder_get_domain_by_id() 2013-05-02T17:33:56+00:00 Sumit Bose sbose@redhat.com 2013-04-19T09:54:14+00:00 498dcbdfdfffa1aee65d53e83c7eafd5e3b084a5 This new call is similar to responder_get_domain() but uses the domain SID as search parameter. Since the length of the stored domain SID is used in the comparison, SIDs of users and groups and be used directly without stripping the RID component. The functionality is not merged into responder_get_domain() to allow to calculate the timeout correctly and return a specific error code if the entry is expired. 
This new call is similar to responder_get_domain() but uses the domain
SID as search parameter. Since the length of the stored domain SID is
used in the comparison, SIDs of users and groups and be used directly
without stripping the RID component.

The functionality is not merged into responder_get_domain() to allow to
calculate the timeout correctly and return a specific error code if the
entry is expired.
Add idmap context to nss context 2013-05-02T17:33:56+00:00 Sumit Bose sbose@redhat.com 2013-04-16T08:48:17+00:00 f427b36b0cecc426856ab3f77a9c684ac355659d This allows the nss responder to use libsss_idmap to convert between different SID representations. 
This allows the nss responder to use libsss_idmap to convert between
different SID representations.
Add two new request types to the data-provider interface 2013-05-02T17:33:56+00:00 Sumit Bose sbose@redhat.com 2013-04-22T14:29:51+00:00 f0944fdd627bd684ff36c9670dc857ffdedc343f The patch adds two new request types for SID related requests. The first one is used if a SID is given and the corresponding object should be found. The second one can be used if the SID for an object is requested but it is not clear if the object is a user or a group. 
The patch adds two new request types for SID related requests. The first
one is used if a SID is given and the corresponding object should be
found. The second one can be used if the SID for an object is requested
but it is not clear if the object is a user or a group.
Add secid filter to responder-dp protocol 2013-05-02T17:33:56+00:00 Sumit Bose sbose@redhat.com 2013-04-11T16:23:27+00:00 206329d3901738036352f2ac1e8d7804f728861d This patch add a new filter type to the data-provider interface which can be used for SID-based lookups. 
This patch add a new filter type to the data-provider interface which
can be used for SID-based lookups.
responder_get_domain(): remove timeout calculation 2013-05-02T17:33:56+00:00 Sumit Bose sbose@redhat.com 2013-04-18T14:29:21+00:00 5a6e3cb57cf2d8d4118b58be0574cccea171ca19 The current timout calculation code in responder_get_domain() is flawed and I think it always was. I removed the related code because - it currently has no effect, a match is returned even if it is expired - that callers do not have any code to handle expired domains. 
The current timout calculation code in responder_get_domain() is flawed
and I think it always was. I removed the related code because
- it currently has no effect, a match is returned even if it is expired
- that callers do not have any code to handle expired domains.
responder_get_domain: do not return disabled domains 2013-05-02T17:33:56+00:00 Sumit Bose sbose@redhat.com 2013-04-18T10:50:18+00:00 2648ec1017d37c0840294352b69fc87047da0368 Recent refactoring introduced to concept of disabled domains, i.e. domains which does not exists anymore. responder_get_domain() should not return disabled domains. 
Recent refactoring introduced to concept of disabled domains, i.e.
domains which does not exists anymore. responder_get_domain() should not
return disabled domains.
Remove unused TALLOC_CTX from responder_get_domain() 2013-05-02T17:33:56+00:00 Sumit Bose sbose@redhat.com 2013-04-18T10:43:47+00:00 4668b4765530cf37289235e483f301100cc1ae21 Recent refactoring removed the need to copy the domain info data of sub-domains because the related objects will not be removed from memory anymore. 
Recent refactoring removed the need to copy the domain info data of
sub-domains because the related objects will not be removed from memory
anymore.
DB: Switch to new libini_config API 2013-04-25T22:26:26+00:00 Ondrej Kos okos@redhat.com 2013-03-28T14:35:03+00:00 7de6e3534fd61c7619ed34a6b1afe7230b5e6504 https://fedorahosted.org/sssd/ticket/1786 Since we need to support the old interface as well, the configure scritp is modified and correct ini interface is chosen. 
https://fedorahosted.org/sssd/ticket/1786

Since we need to support the old interface as well, the configure scritp
is modified and correct ini interface is chosen.