sssd.git/src/config/SSSDConfig, branch sssctl

CONFIG: Add a new option auto_private_groups

2017-10-26T08:10:49+00:00

The auto_private_groups option is used to configure the domain->mpg flag
which was already set automatically for subdomains, but for some time was
not settable by the admin via the configuration file.

The new option name, instead of the old magic_private_groups, was chosen
purely because this name would hopefully be better understood by admins.

The option doesn't do anything yet, it is just added to all the places a
new option should be added to.

Related:
    https://pagure.io/SSSD/sssd/issue/1872

Reviewed-by: Fabiano Fidêncio 
Reviewed-by: Pavel Březina

LDAP: Add support for rhost access control

2017-10-19T14:05:06+00:00

This patch implements verification of pam_rhost against
rules stored in LDAP entry of a user.

Reviewed-by: Jakub Hrozek 
Reviewed-by: Pavel Březina

python: Changing class declaration from old to new-style type

2017-10-04T06:59:14+00:00

Resolves:
https://pagure.io/SSSD/sssd/issue/3517

Signed-off-by: Lukas Slebodnik 
Reviewed-by: Fabiano Fidêncio 
Reviewed-by: Lukáš Slebodník

SECRETS: Add a new option to control per-UID limits

2017-09-01T18:26:45+00:00

Adds a new option max_uid_secrets that allows to set a limit of secrets
for this particular client so that the user cannot starve other users.

Resolves:
https://pagure.io/SSSD/sssd/issue/3363

Reviewed-by: Simo Sorce 
Reviewed-by: Fabiano Fidêncio

DESKPROFILE: Add ipa_deskprofile_request_interval

2017-08-28T18:42:27+00:00

This option has been added to avoid contacting the Data Provider when no
rules were found in the previous request.

By adding this configurable option we avoid contacting the Data Provider
too often in the case described above and also when the server doesn't
support Desktop Profile's integration.

Resolves: https://pagure.io/SSSD/sssd/issue/3482

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Pavel Březina 
Reviewed-by: Jakub Hrozek

DESKPROFILE: Introduce the new IPA session provider

2017-08-28T18:41:04+00:00

In order to provide FleetCommander[0] integration, a session provider
has been introduced for IPA. The design of this feature and more
technical details can be found at [1] and [2], which are the design
pages of both freeIPA and SSSD parts.

As there's no way to test freeIPA integration with our upstream tests,
no test has been provided yet.

Is also worth to mention that the name "deskprofile" has been chosen
instead of "fleetcmd" in order to match with the freeIPA plugin. It
means that, for consistence, all source files, directories created,
options added, functions prefixes and so on are following the choice
accordingly.

[0]: https://wiki.gnome.org/Projects/FleetCommander
[1]: https://github.com/abbra/freeipa-desktop-profile/blob/master/plugin/Feature.mediawiki
[2]: https://docs.pagure.org/SSSD.sssd/design_pages/fleet_commander_integration.html

Resolves:
https://pagure.io/SSSD/sssd/issue/2995

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Pavel Březina 
Reviewed-by: Jakub Hrozek

sudo: add a threshold option to reduce size of rules refresh filter

2017-08-18T06:52:25+00:00

If a large number of rules is expired at one time the ldap filter may
become too large to be processed by server. This commits adds a new
option "sudo_threshold" to sudo responder. If the threshold is
exceeded a full refreshed is done instead of rules refresh.

Resolves:
https://pagure.io/SSSD/sssd/issue/3478

Reviewed-by: Jakub Hrozek 
Reviewed-by: Fabiano Fidêncio

Fix minor typos

2017-08-16T12:39:31+00:00

Merges: https://pagure.io/SSSD/sssd/pull-request/3456

Reviewed-by: Michal Židek

Fix minor typos

2017-07-26T15:46:11+00:00

Merges: https://pagure.io/SSSD/sssd/pull-request/3456

Reviewed-by: Michal Židek

SSSDConfig: Fix saving of debug_level

2017-05-29T10:09:33+00:00

SSSDConfig internally handle debug_level as an integer.
But in case of bitmask version of debug_level (>=16)
it stored value as a decimal which is confusing
e.g.
    debug_level = 8176
vs.
    debug_level = 0x1ff0

Resolves:
https://pagure.io/SSSD/sssd/issue/3410

Reviewed-by: Jakub Hrozek