sssd.git/src/providers/ipa, branch certificate_mapping

IPA: add certmap support (wip)

2017-02-13T16:31:48+00:00

sss_cert_derb64_to_ldap_filter: add sss_certmap support

2017-02-13T16:31:48+00:00

SUDO: Add skip_entry boolean to sudo conversions

2017-02-07T16:27:21+00:00

Add boolean to convert_attributes function and pass boolean as argument
to sudo conversion functions to add logic for skipping unexpected
entries like replication conflicts.

Resolves:
https://fedorahosted.org/sssd/ticket/3288

Reviewed-by: Jakub Hrozek

DP: Remove unused attr_type from struct dp_id_data

2017-01-16T08:58:15+00:00

Structure member attr_type was set to BE_ATTR_CORE on all places
and there was a single place src/providers/ldap/ldap_id.c where
we checked to other values. It is not used anymore; it's better to
remove it.

Reviewed-by: Michal Židek

LDAP: Remove unused parameter attr_type from groups_get_send

2017-01-16T08:58:08+00:00

Reviewed-by: Michal Židek

ipa: Nested netgroups do not work

2016-11-14T13:39:26+00:00

We lowercase the keys to the hash table used to store netgroups
but do not lowercase it when reading the table. This results
in nested netgroups not being found when they should and
the processing fails.

The lowercasing does not seem to be necessary anymore (not
sure if it ever was) so we can skip it.

Resolves:
https://fedorahosted.org/sssd/ticket/3159

Reviewed-by: Petr Cech

IPA/AD: check auth ctx before using it

2016-11-10T20:50:22+00:00

In e6b6b9fa79c67d7d2698bc7e33d2e2f6bb53d483 a feature was introduced to
set the 'canonicalize' option in the system-wide Kerberos configuration
according to the settings in SSSD if the AD or IPA provider were used.
Unfortunately the patch implied that the auth provider is the same as
the id provider which might not always be the case. A different auth
provider caused a crash in the backend which is fixed by this patch.

Resolves https://fedorahosted.org/sssd/ticket/3234

Reviewed-by: Petr Cech

IPA: Initialize a boolean control value

2016-10-04T19:56:31+00:00

without this patch, valgrind was reporting:
==30955== Conditional jump or move depends on uninitialised value(s)
==30955== at 0xDBBACC3: ipa_subdomains_slave_search_done (ipa_subdomains.c:1111)
==30955== by 0xE73B34D: sdap_search_bases_ex_done (sdap_ops.c:222)
==30955== by 0xE6FFA98: sdap_get_generic_done (sdap_async.c:1872)
==30955== by 0xE6FF4E2: generic_ext_search_handler (sdap_async.c:1689)
==30955== by 0xE6FF840: sdap_get_and_parse_generic_done (sdap_async.c:1797)
==30955== by 0xE6FEFB5: sdap_get_generic_op_finished (sdap_async.c:1579)
==30955== by 0xE6FB1D2: sdap_process_message (sdap_async.c:353)
==30955== by 0xE6FAD51: sdap_process_result (sdap_async.c:197)
==30955== by 0xE6FAA14: sdap_ldap_next_result (sdap_async.c:145)
==30955== by 0x8E157FF: tevent_common_loop_timer_delay (tevent_timed.c:341)
==30955== by 0x8E16809: epoll_event_loop_once (tevent_epoll.c:911)
==30955== by 0x8E14F09: std_event_loop_once (tevent_standard.c:114)
==30955==

Resolves:
https://fedorahosted.org/sssd/ticket/3213

Reviewed-by: Fabiano Fidêncio

Remove double semicolon at the end of line

2016-09-21T13:10:11+00:00

Reviewed-by: Pavel Březina

dyndns: fix typo and unify ipa with ad debug message when off

2016-08-30T12:30:53+00:00

Reviewed-by: Petr Čech 
Reviewed-by: Lukáš Slebodník