sssd.git/src/util, branch tlog

UTIL: Add session recording conf management module

2017-04-20T08:23:23+00:00

Add an util module for loading session recording configuration.
To be used by responders and data provider.

NSS: Move output name formatting to utils

2017-04-20T08:23:23+00:00

Move NSS nss_get_name_from_msg and the core of sized_output_name to the
utils to make them available to provider and other responders.

UTIL: Use max 15 characters for AD host UPN

2017-04-12T21:15:06+00:00

We do not want to use host principal with AD
"host/name.domain.tld@DOMAIN.TLD" because it does not work.
We need to use correct user principal for AD hosts. And we cannot
rely all fallback "*$" because of other principals in keytab.

The NetBIOS naming convention allows for 16 characters in a NetBIOS
name. Microsoft, however, limits NetBIOS names to 15 characters and
uses the 16th character as a NetBIOS suffix.
https://support.microsoft.com/en-us/help/163409/netbios-suffixes-16th-character-of-the-netbios-name

Resolves:
https://pagure.io/SSSD/sssd/issue/3329

Reviewed-by: Michal Židek

selinux: Do not fail if SELinux is not managed

2017-04-06T11:41:33+00:00

Previously we failed if semanage_is_managed returned 0 or -1 (not
managed or error). With this patch we only fail in case of error and
continue normally if selinux is not managed by libsemanage at all.

Resolves:
https://fedorahosted.org/sssd/ticket/3297

Reviewed-by: Lukáš Slebodník

libsss_certmap: Accept certificate with data before header

2017-04-03T08:43:07+00:00

According to RFC 7468 parser must not fail when some data are present
before the encapsulation boundary. sss_cert_pem_to_der didn't respect
this and refused valid input. Changing it's code to first locate
the certificate header fixes the issue.

Resolves:
https://pagure.io/SSSD/sssd/issue/3354

Reviewed-by: Sumit Bose 
Reviewed-by: Fabiano Fidêncio

sss_iobuf: fix 'read' shadows a global declaration

2017-03-30T17:08:25+00:00

Reviewed-by: Lukáš Slebodník

tcurl: add support for http basic auth

2017-03-30T17:07:13+00:00

Reviewed-by: Simo Sorce 
Reviewed-by: Jakub Hrozek

tcurl: add support for ssl and raw output

2017-03-30T17:06:44+00:00

At first, this patch separates curl_easy handle from the multi-handle
processing and makes it encapsulated in custom tcurl_request structure.
This allows us to separate protocol initialization from its asynchonous
logic which gives us the ability to set different options for each
request without over-extending the parameter list.

In this patch we implement options for peer verification for TLS-enabled
protocols and to return response with body and headers together.

Reviewed-by: Simo Sorce 
Reviewed-by: Jakub Hrozek

CONFDB: Introduce SSSD domain type to distinguish POSIX and application domains

2017-03-30T12:09:02+00:00

Related to:
https://pagure.io/SSSD/sssd/issue/3310

Adds a new option that allows to distinguish domains that do contain
POSIX users and groups and those that don't. The POSIX domains are the
default. The non-POSIX domains are selected by selecting an
"application" type domain.

Reviewed-by: Sumit Bose 
Reviewed-by: Pavel Březina

UTIL: Expose replace_char() as sss_replace_char()

2017-03-29T12:00:17+00:00

This method is going to be used in the follow-up patch for replacing ','
by ':' so we can keep the domain resolution order option consitent with
the way it's set on IPA side and still keep consistent with the way
lists are represented on sssd.conf file.

Related:
https://pagure.io/SSSD/sssd/issue/3001

Signed-off-by: Fabiano Fidêncio 

Reviewed-by: Sumit Bose 
Reviewed-by: Pavel Březina