sssd.git/src/config/SSSDConfig, branch master

config API: read only specific files from schemaplugindir

2014-03-02T20:45:16+00:00

Currently the config API read any file in the schema plugin dir,
typically /usr/share/sssd/sssd.api.d. If there are any unexpected files,
like e.g. editor copies or backups, the python code might break because
it cannot parse the files.

With this patch only files matching the pattern '^sssd-.*\.conf$' are
read from this directory.

Additionally this patch contains a file which will break the config API
self test if it is not filtered out correctly.

Reviewed-by: Stephen Gallagher

Add new option ldap_group_type

2013-12-19T16:34:01+00:00

dp: make subdomains refresh interval configurable

2013-10-25T20:12:18+00:00

This patch makes the refresh of available subdomains configurable.

New option:
subdomain_refresh_interval (undocumented)

Resolves:
https://fedorahosted.org/sssd/ticket/1968

Add a new option to control subdomain enumeration

2013-08-28T16:07:04+00:00

Add now options ldap_min_id and ldap_max_id

2013-06-28T18:20:59+00:00

Currently the range for Posix IDs stored in an LDAP server is unbound.
This might lead to conflicts in a setup with AD and trusts when the
configured domain uses IDs from LDAP. With the two noe options this
conflict can be avoided.

A new option krb5_use_kdcinfo

2013-06-10T19:03:01+00:00

https://fedorahosted.org/sssd/ticket/1883

The patch introduces a new Kerberos provider option called
krb5_use_kdcinfo. The option is true by default in all providers. When
set to false, the SSSD will not create krb5 info files that the locator
plugin consumes and the user would have to set up the Kerberos options
manually in krb5.conf

back end: add refresh expired records periodic task

2013-06-10T18:30:57+00:00

https://fedorahosted.org/sssd/ticket/1713

Add new option refresh_expired_interval.

Adding option to disable retrieving large AD groups.

2013-05-23T09:45:38+00:00

This commit adds new option ldap_disable_range_retrieval with default value
FALSE. If this option is enabled, large groups(>1500) will not be retrieved and
behaviour will be similar like was before commit ae8d047122c
"LDAP: Handle very large Active Directory groups"

https://fedorahosted.org/sssd/ticket/1823

dyndns: new option dyndns_auth

2013-05-03T18:25:46+00:00

This options is mostly provided for future expansion. Currently it is
undocumented and both IPA and AD dynamic DNS updates default to
GSS-TSIG. Allowed values are GSS-TSIG and none.

dyndns: new option dyndns_force_tcp

2013-05-03T18:25:46+00:00

https://fedorahosted.org/sssd/ticket/1831

Adds a new option that can be used to force nsupdate to only use TCP to
communicate with the DNS server.