sssd.git/src/responder/ssh, branch prompting

Just return NULL if tevent_req_create() fails

2016-02-11T13:39:12+00:00

In general we just return NULL if tevent_req_create() fails because
there is nothing we can do with the request anyway. Especially
tevent_req_error() should not be called because it tries to dereference
req.

Reviewed-by: Pavel Březina

p11: enable ocsp checks

2015-11-26T15:39:49+00:00

This patch enables the Online Certificate Status Protocol in NSS and
adds an option to disable it if needed. To make further tuning of
certificate verification more easy it is not an option on its own but an
option to the new certificate_verification configuration option.

Resolves https://fedorahosted.org/sssd/ticket/2812

Reviewed-by: Jakub Hrozek

SSH: Use sss_unique_file_ex to create the known hosts file

2015-08-17T13:22:15+00:00

Simplifies the code.

Reviewed-by: Pavel Březina

ssh: generate public keys from certificate

2015-07-31T07:52:06+00:00

Resolves: https://fedorahosted.org/sssd/ticket/2711

Reviewed-by: Jakub Hrozek

responders: reset ncache after domains are discovered during startup

2015-04-09T06:35:23+00:00

After responders start, they add a lookup operation that discovers the
subdomains so that qualifying users works. After this operation is
finishes, we need to reset negcache to allow users to be added into the
newly discovered domains.

Reviewed-by: Lukáš Slebodník

SSH: Ignore the default_domain_suffix

2015-04-01T11:50:21+00:00

https://fedorahosted.org/sssd/ticket/2609

In a trust setup, hosts are normally only stored on the IPA server. The
default_domain_suffix option is only recommended for the IPA-AD trust
scenario as well. Therefore we should ignore this option in the SSH
provider.

Reviewed-by: Pavel Březina 
Reviewed-by: Jan Cholasta

Fix: always check return value of unlink()

2014-11-28T15:16:37+00:00

Resolves:
https://fedorahosted.org/sssd/ticket/2506

Reviewed-by: Lukáš Slebodník

Views: apply user SSH public key override

2014-11-05T14:26:36+00:00

With this patch the SSH public key override attribute is read from the
FreeIPA server and saved in the cache with the other override data.

Since it is possible to have multiple public SSH keys this override
value does not replace any other data but will be added to existing
values.

Fixes https://fedorahosted.org/sssd/ticket/2454

Reviewed-by: Jakub Hrozek

RESPONDERS: Set default value for umask

2014-10-29T09:41:06+00:00

Resolves: https://fedorahosted.org/sssd/ticket/2468

Reviewed-by: Jakub Hrozek

SSH: Run the ssh responder as the SSSD user

2014-10-22T13:44:53+00:00

Reviewed-by: Pavel Reichl 
Reviewed-by: Simo Sorce