sssd.git/src/responder, branch certificate_mapping

cache_req: always go to dp first when looking up host

2017-02-08T20:25:48+00:00

We need to always lookup host in DP first to update host certificates so
we are consinstent during ssh authentication.

Reviewed-by: Lukáš Slebodník

ssh: fix typo

2017-02-08T20:25:42+00:00

Those macros are the same so there is no functional difference.

Reviewed-by: Lukáš Slebodník

ssh: rewrite ssh responder to use cache_req

2017-02-08T10:05:51+00:00

This is a bigger change since both supported commands could be
rewritten for cache_req and the logic could be deleted. I decided
to also split the file into more modules and follow similar pattern
as with nss responder.

Resolves:
https://fedorahosted.org/sssd/ticket/1126

Reviewed-by: Jakub Hrozek

cache_req: add host by name search

2017-02-08T10:05:46+00:00

Reviewed-by: Jakub Hrozek

cache_req: move dp request to plugin

2017-02-08T10:05:42+00:00

This will allow to use cache req even for object that do not use
account request such as hosts.

Reviewed-by: Jakub Hrozek

cache_req: add api to create ldb_result from message

2017-02-08T10:05:38+00:00

Some sysdb methods doesn't return ldb_result as output but return
ldb_message instead. Changing sysdb to be consistent is too big
so I added this helper function that will wrap resulting message
into ldb_result.

Reviewed-by: Jakub Hrozek

cache_req: search user by name with attrs

2017-02-08T10:05:33+00:00

Sometime is is desirable to aquire more attribute from user object
than SYSDB_PW_ATTRS set. such as user's public key.

Reviewed-by: Jakub Hrozek

cache_req: add ability to not use default domain suffix

2017-02-08T10:05:29+00:00

This will be used in the next plugin "host by name" where
it is not desirable to use default domain suffix if set.

Reviewed-by: Jakub Hrozek

sss_parse_inp_send: provide default_domain as parameter

2017-02-08T10:05:23+00:00

It is not always desirable to consider default_domain from configuration
but expect none instead. For example when we search host certificates.

This is currently not used in this patch since host lookups parse
name directly with sss_parse_name but it will be used in the next
patch.

Reviewed-by: Jakub Hrozek

ssh: do not create again fq name

2017-02-08T10:05:18+00:00

We store fully qualified name in sysdb so there is no need to append
the domain part again which result in name@domain@domain string.
This field is not actually used in ssh client so it doesn't cause
any issue but we should stay correct here.

Reviewed-by: Jakub Hrozek