sssd.git/src/config, branch master

config API: prepend source dir search path for tests

2014-03-02T20:45:22+00:00

Instead of appending the search patch in the source directory should be
prepended. Otherwise the test might find files installed in the default
paths of the system first.

As a result the compiled python files in the build directory must be
remove in the clean target to make 'make distcheck' pass.

Reviewed-by: Jakub Hrozek

config API: read only specific files from schemaplugindir

2014-03-02T20:45:16+00:00

Currently the config API read any file in the schema plugin dir,
typically /usr/share/sssd/sssd.api.d. If there are any unexpected files,
like e.g. editor copies or backups, the python code might break because
it cannot parse the files.

With this patch only files matching the pattern '^sssd-.*\.conf$' are
read from this directory.

Additionally this patch contains a file which will break the config API
self test if it is not filtered out correctly.

Reviewed-by: Stephen Gallagher

SUDO: AD provider

2014-03-02T19:55:49+00:00

This patch adds the sudo target to the AD provider. The main reason is
to cover different default settings in the LDAP and AD provider. E.g.
the default for ldap_id_mapping is True in the AD provider and False
in the LDAP provider. If ldap_id_mapping was not set explicitly in the
config file both components worked with different setting.

Fixes https://fedorahosted.org/sssd/ticket/2256

Reviewed-by: Jakub Hrozek 
Reviewed-by: Lukáš Slebodník 
Reviewed-by: Pavel Březina

config API: add missing subdomain target to AD provider test

2014-03-02T19:53:50+00:00

Reviewed-by: Jakub Hrozek 
Reviewed-by: Lukáš Slebodník 
Reviewed-by: Pavel Březina

AD: Add a new option to turn off GC lookups

2013-12-19T16:39:56+00:00

SSSD now defaults to using GC by default. For some environments, for
instance those that don't or can't replicate the POSIX attributes to
Global Catalog, this might not be desirable.

This patch introduces a new option ad_enable_gc, that is enabled by
default. Setting this option to false makes the SSSD contact only the
LDAP port of AD DCs.

Add new option ldap_group_type

2013-12-19T16:34:01+00:00

Add ldap_autofs_map_master_name option

2013-11-12T09:50:46+00:00

confdb: Make offline timeout configurable

2013-11-07T10:35:49+00:00

Added and documented option offline_timeout.

Resolves:
https://fedorahosted.org/sssd/ticket/1718

dp: make subdomains refresh interval configurable

2013-10-25T20:12:18+00:00

This patch makes the refresh of available subdomains configurable.

New option:
subdomain_refresh_interval (undocumented)

Resolves:
https://fedorahosted.org/sssd/ticket/1968

AD: Add a new option ad_access_filter

2013-10-25T19:02:43+00:00

This patch just adds the option, it doesn't do anything useful yet.

Related:
https://fedorahosted.org/sssd/ticket/2082