sssd.git/src/db, branch sssctl

AD: Remember last site discovered in sysdb

2017-11-02T11:47:27+00:00

This can speed up sssd startup.

Resolves:
https://pagure.io/SSSD/sssd/issue/3265

Reviewed-by: Jakub Hrozek

sysdb: add functions to get/set client site

2017-11-02T11:47:23+00:00

Reviewed-by: Jakub Hrozek

SYSDB: Prevent users and groups ID collision in MPG domains except for id_provider=local

2017-10-26T08:11:22+00:00

This commit makes the check when adding an object in a MPG domain
stricter in the sense that not only same names are allowed in a MPG
domain, but also the same groups are not allowed either.

This commit is a backwards-incompatible change, but one that is needed,
otherwise requesting the duplicate group first and then requesting the
user entry would yield two object when searching by GID.

In order to keep backwards-compatibility, this uniqueness is NOT
enforced with id_provider=local. This constraint can be removed in
the future (or the local provider can be dropped altogether)

Reviewed-by: Pavel Březina 
Reviewed-by: Fabiano Fidêncio

Fix minor spelling mistakes

2017-10-25T08:24:49+00:00

Merges: https://pagure.io/SSSD/sssd/pull-request/3556

Reviewed-by: Lukáš Slebodník

LDAP: Add support for rhost access control

2017-10-19T14:05:06+00:00

This patch implements verification of pam_rhost against
rules stored in LDAP entry of a user.

Reviewed-by: Jakub Hrozek 
Reviewed-by: Pavel Březina

sysdb: sanitize search filter input

2017-10-11T15:28:53+00:00

This patch sanitizes the input for sysdb searches by UPN/email, SID and
UUID.

This security issue was assigned CVE-2017-12173

Reviewed-by: Lukáš Slebodník 
Reviewed-by: Jakub Hrozek

sysdb: add missing indices

2017-09-14T15:05:56+00:00

Resolves https://pagure.io/SSSD/sssd/issue/3472

Reviewed-by: Jakub Hrozek

SUDO: Use initgr_with_views when looking up a sudo user

2017-09-08T15:02:49+00:00

The sudo responder code didn't take views into account when looking for
rules, which resulted in sudo rules being ignored if the user's name was
overriden.

Please see the ticket for a detailed info on how to reproduce the bug.

Resolves:
https://pagure.io/SSSD/sssd/issue/3488

Reviewed-by: Pavel Březina

SYSDB: Add sysdb_search_by_orig_dn()

2017-09-05T09:13:16+00:00

Three new methods have been added to sysdb's API in order to perform
search by the orig dn (which is quite common in SSSD's code base).

A common/base method called sysdb_search_by_orig_dn() is the most
important one and then a few other helpers for searching users and
groups groups directly.

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Jakub Hrozek 
Reviewed-by: Lukáš Slebodník

SYSDB: Add sessionRecording attribute macro

2017-07-27T08:32:41+00:00

Add a macro for sessionRecording attribute to sysdb.h.
To be used for storing a boolean attribute signifying if session
recording is enabled for the user.

Reviewed-by: Pavel Březina