sssd.git/src/responder/ssh, branch certificate_mapping

ssh: fix typo

2017-02-08T20:25:42+00:00

Those macros are the same so there is no functional difference.

Reviewed-by: Lukáš Slebodník

ssh: rewrite ssh responder to use cache_req

2017-02-08T10:05:51+00:00

This is a bigger change since both supported commands could be
rewritten for cache_req and the logic could be deleted. I decided
to also split the file into more modules and follow similar pattern
as with nss responder.

Resolves:
https://fedorahosted.org/sssd/ticket/1126

Reviewed-by: Jakub Hrozek

cache_req: add host by name search

2017-02-08T10:05:46+00:00

Reviewed-by: Jakub Hrozek

ssh: do not create again fq name

2017-02-08T10:05:18+00:00

We store fully qualified name in sysdb so there is no need to append
the domain part again which result in name@domain@domain string.
This field is not actually used in ssh client so it doesn't cause
any issue but we should stay correct here.

Reviewed-by: Jakub Hrozek

ssh: fix number of output certificates

2017-02-08T10:05:08+00:00

SSH responder returned invalid number of certificates when
original ad pubkey attribute was not empty. Since we always
return all certificates to the client we should add number
of results to the output not override it.

Reviewed-by: Jakub Hrozek

SSH: Make SSH responder socket-activatable

2017-01-23T17:46:37+00:00

As part of the effort of making all responder socket-activatable, let's
make SSH responder ready for this by providing its systemd's units.

In case the administrators want to use SSH responder taking advantage
of socket-activation they will need to enable sssd-ssh.socket and after
a restart of the sssd service, the SSH socket will be ready waiting for
any activity in order to start the SSH responder. Also, the SSH
responder must be removed from the services line on sssd.conf.

The SSH responder service is binded to the SSSD service, which means
that the responder will be restarted in case SSSD is restarted and
shutdown in case SSSD is shutdown/crashes.

Related:
https://fedorahosted.org/sssd/ticket/2243

Signed-off-by: Fabiano Fidêncio 
Reviewed-by: Pavel Březina 
Reviewed-by: Jakub Hrozek 
Reviewed-by: Lukáš Slebodník

SSH: Use default_domain_suffix for users' authorized keys

2016-12-06T09:28:29+00:00

In commit eeecc48d22a28bb69da56f6ffd8824163fc9bf00 we disabled
default_domain_suffix for the SSH responder, but in a wrong way -- we
disabled the functionality completely, also for users, not only for
computers. This might have been correct at the time, since SSH keys in ID
overrides are a relatively new feature, but it's definitely not correct
in general.

Instead, this patch restores the use of default_domain_suffix, but only
for looking up public keys of users, not of computers.

Resolves:
https://fedorahosted.org/sssd/ticket/3259

Reviewed-by: Petr Cech

MONITOR: Remove unused shutDown sbus method

2016-11-09T12:32:32+00:00

The shutDown method has not been used or set for a long time. Trim the
internal interface by removing all references to this internal method.

Reviewed-by: Lukáš Slebodník

MONITOR: Remove deprecated pong sbus method

2016-11-09T12:32:27+00:00

The pong method is deprecated since we started using the watchdog. Since
this is dead code, it makes sense to just remove it.

Reviewed-by: Lukáš Slebodník

DP: Remove old data provider interface

2016-08-16T12:54:50+00:00

Reverse data provider interface is moved to a better location in
NSS responder. All responders now can have an sbus interface
defined per data provider connection. The unused old data provider
interface is removed.

Reviewed-by: Lukáš Slebodník