sssd.git/src/providers/ldap/sdap_async_groups.c, branch simo

Add domain argument to sysdb_search_groups()

2013-01-11T15:43:13+00:00

Add domain arg to sysdb_search_users()

2013-01-11T15:43:13+00:00

Add domain argument to sysdb_store_group()

2013-01-11T15:43:12+00:00

Also remove sysdb_store_domgroup()

Add domain argument to sysdb_set_user_attr()

2013-01-11T15:43:11+00:00

Add domain to sysdb_search_user_by_name()

2013-01-11T15:43:10+00:00

Also remove unused sysdb_search_domuser_by_name()

Make sysdb_domain_dn() require a domain.

2013-01-11T15:43:09+00:00

AD: Add user as a direct member of his primary group

2013-01-09T16:59:28+00:00

In the AD case, deployments sometimes add groups as parents of the
primary GID group. These groups are then returned during initgroups
in the tokenGroups attribute and member/memberof links are established
between the user and the group. However, any update of these groups
would remove the links, so a sequence of calls: id -G user; id user; id
-G user would return different group memberships.

The downside of this approach is that the user is returned as a group
member during getgrgid call as well.

AD: replace GID/UID, do not add another one

2013-01-09T16:59:23+00:00

The code would call sysdb_attrs_add_uint32 which added another UID or GID
to the ID=0 we already downloaded from LDAP (0 is the default value) when
ID-mapping an entry. This led to funky behaviour later on when we wanted
to process the ID.

Indentation fix

2012-12-04T10:28:24+00:00

idmap: Silence DEBUG messages when dealing with built-in SIDs.

2012-11-28T10:20:09+00:00

When converting built-in SID to unix GID/UID a confusing debug
message about the failed conversion was printed. This patch special
cases these built-in objects.

https://fedorahosted.org/sssd/ticket/1593