freeipa.git/daemons/ipa-slapi-plugins/ipa-extdom-extop, branch patternfly

extdom: do not return results from the wrong domain

2014-03-25T13:03:05+00:00

Resolves: https://fedorahosted.org/freeipa/ticket/4264
Reviewed-By: Tomas Babej

Remove CFLAGS duplication.

2013-12-06T13:44:41+00:00

https://fedorahosted.org/freeipa/ticket/3896

EXTDOM: Do not overwrite domain_name for INP_SID

2013-08-29T13:30:38+00:00

Fix extdom plugin to provide unqualified name in response as sssd expects

2013-07-11T09:39:28+00:00

extdom plugin handles external operation over which SSSD asks IPA server about
trusted domain users not found through normal paths but detected to belong
to the trusted domains associated with IPA realm.

SSSD expects that user or group name in the response will be unqualified
because domain name for the user or group is also included in the response.
Strip domain name from the name if getgrnam_r/getpwnam_r calls returned fully
qualified name which includes the domain name we are asked to handle.

The code already expects that fully-qualified names are following user@domain
convention so we are simply tracking whether '@' symbol is present and is followed
by the domain name.

Make sure domain_name is also set when processing INP_NAME requests

2013-07-11T09:39:27+00:00

extdom: replace winbind calls with POSIX/SSSD calls

2013-07-11T09:39:27+00:00

With the new ipa_server_mode SSSD is able to read user and group data
from trusted AD domains directly and makes this data available via the
NSS responder. With this mode enabled winbind is not needed anymore to
lookup users and groups of trusted domains.

This patch removed the calls to winbind from the extdom plugin and
replaces them with standard POSIX calls like getpwnam() and calls from
libsss_nss_idmap to lookup SIDs.

Fixes https://fedorahosted.org/freeipa/ticket/3637 because now the
extdom plugin does not need to handle idranges anymore, but everything
is done inside SSSD.

Fix log format not a string literal.

2013-06-03T07:57:24+00:00

This was to resolve a -Werror=format-security error.

  ipa_extdom_extop.c: In function 'ipa_extdom_extop':
  ipa_extdom_extop.c:144:9: error: format not a string literal and no format
arguments [-Werror=format-security]

Allow ID-to-SID mappings in the extdom plugin

2013-05-02T20:57:12+00:00

https://fedorahosted.org/freeipa/ticket/3596

Do not store SID string in a local buffer

2013-05-02T20:57:12+00:00

https://fedorahosted.org/freeipa/ticket/3596

Do not lookup up the domain too early if only the SID is known

2013-05-02T20:57:12+00:00

Request with a SID as input parameter do not contain the domain name,
hence is must be tried to resolve the SID first before the corresponding
domain can be looked up.

https://fedorahosted.org/freeipa/ticket/3596