sssd.git/src/sss_client, branch master

sssctl: integrate pam_test_client into sssctl

2017-04-10T13:21:56+00:00

Reviewed-by: Pavel Březina

pam_test_client: add InfoPipe user lookup

2017-04-10T13:21:56+00:00

Related to https://pagure.io/SSSD/sssd/issue/3292

Reviewed-by: Pavel Březina

pam_test_client: add SSSD getpwnam lookup

2017-04-10T13:18:24+00:00

Related to https://pagure.io/SSSD/sssd/issue/3292

Reviewed-by: Pavel Březina

pam_test_client: add service and environment to PAM test client

2017-04-10T13:13:01+00:00

Related to https://pagure.io/SSSD/sssd/issue/3292

Reviewed-by: Pavel Březina

nss-idmap: add sss_nss_getlistbycert()

2017-03-23T16:23:36+00:00

This patch adds a getlistbycert() call to libsss_nss_idmap to make it on
par with InfoPipe.

Related to https://pagure.io/SSSD/sssd/issue/3050

Reviewed-by: Jakub Hrozek

pam: use authtok from PAM stack if available

2017-03-02T11:07:48+00:00

With this patch the behavior of pam_sss is slightly changed to be more
similar to the behavior of other PAM modules. Currently pam_sss expects
that there is a authtok (password) on the PAM stack if the
'use_first_pass' option was used. Without the option pam_sss
unconditionally prompts for credentials.

With this patch pam_sss will use an authtok from the PAM stack even if
'use_first_pass' is not set but it will assume that it is a password. To
return to the previous behavior the new 'prompt_always' can be used.

Resolves:
https://pagure.io/SSSD/sssd/issue/2984

Reviewed-by: Pavel Březina

Use pagure links as a reference to upstream

2017-02-28T09:59:57+00:00

Reviewed-by: Fabiano Fidêncio

KRB5: allow pkinit pre-authentication

2017-02-23T09:15:16+00:00

Reviewed-by: Jakub Hrozek

pam: enhance Smartcard authentication token

2017-02-23T09:15:13+00:00

Reviewed-by: Jakub Hrozek

p11: return name of PKCS#11 module and key id to pam_sss

2017-02-23T09:15:11+00:00

Reviewed-by: Jakub Hrozek