sssd.git/src/providers/data_provider_be.c, branch simo

Add domain argument to sysdb_initgroups()

2013-01-11T15:43:10+00:00

Refactor single domain initialization

2013-01-11T15:43:09+00:00

Bring it out of sysdb, which will slowly remove internal dependencies on
domains and instead will always require them to be passed by callers.

DP: invalidate all cached maps if a request for auto.master comes in

2012-12-18T16:25:34+00:00

If the Data Provider receives a request for the auto.master map, it
passes on a flag to let the actual provider let know he should
invalidate the existing maps

Add backchannel NSS provider query on initgr calls

2012-12-05T22:01:37+00:00

This is needed in order to assure the memcache is properly and promptly
cleaned up if a user memberships change on login.

The list of the current groups for the user is sourced before it is
updated and sent to the NSS provider to verify if it has changed after
the update call has been made.

Refactor the way subdomain accounts are saved

2012-11-19T14:11:03+00:00

The original sysdb code had a strong assumption that only users from one
domain are saved in the databse, with the subdomain feature, we have
changed reality, but have not adjusted all the code arund the sysdb calls
to not rely on the original assumption.

One of the side effects of this incongrunece is that currently group
memberships do not return fully qualified names for subdomain users as they
should.

In oreder to fix this and other potential issues surrounding the violation
of the original assumption, we need to fully qualify subdomain user names.
By savin them fully qualified we do not risk aliasing local users and have
group memberhips or other name based matching code mistake a domain user
with subdomain usr or vice versa.

Run IPA subdomain provider if IPA ID provider is configured

2012-11-14T09:42:34+00:00

To make configuration easier the IPA subdomain provider should be always
loaded if the IPA ID provider is configured and the subdomain provider
is not explicitly disabled. But to avoid the overhead of regular
subdomain requests in setups where no subdomains are used the IPA
subdomain provider should behave differently if configured explicit or
implicit.

If the IPA subdomain provider is configured explicitly, i.e.
'subdomains_provider = ipa' can be found in the domain section of
sssd.conf subdomain request are always send to the server if needed.

If it is configured implicitly and a request to the server fails
with an indication that the server currently does not support subdomains
at all, e.g. is not configured to handle trust relationships, a new
request will be only send to the server after a long timeout or after
a going-online event.

To be able to make this distinction this patch save the configuration
status to the subdomain context.

Fixes https://fedorahosted.org/sssd/ticket/1613

backend: add PAC to the list of known clients

2012-11-12T19:30:01+00:00

Include talloc log in our debug facility

2012-10-29T16:15:37+00:00

https://fedorahosted.org/sssd/ticket/1495

Make subdomain discovery less noisy

2012-09-24T15:58:10+00:00

Fixes https://fedorahosted.org/sssd/ticket/1517

backend: initialize sudo only when it is enabled in services

2012-09-12T12:27:37+00:00

https://fedorahosted.org/sssd/ticket/1458

When the responder is disabled and sudo_provider is set explicitly,
a warning is print and the module will be initialized.