sssd.git/src/providers/ldap, branch sasl_ad_compat

Enable removing nonexisting dn in sdap_handle_account_info

2013-08-07T22:52:02+00:00

Change was introduced in commit ca344fde

Fix memory context for hash entries

2013-08-07T22:30:57+00:00

In sdap_nested_group_populate_users() username and orignal_dn are
allocated on a temporary memory context. If the corresponding user is
not found in the cache both are added to a hash which is later on
returned to the caller. To avoid a use-after-free when the hash entries
are looked up both must be reassigned to the memory context of the hash.

Fix memory context for a state member

2013-08-07T09:36:50+00:00

primary_name was allocated on a temporary memory context but as it is a
member of the state struct it should belong to the memory context of the
state.

sudo: print better debug message when a rule has multiple cn values

2013-08-05T14:52:44+00:00

sudo: skip rule on error instead of failing completely

2013-08-05T14:52:44+00:00

https://fedorahosted.org/sssd/ticket/2031

Prevent using uninitialized "group_name" in done section.

2013-07-25T15:43:05+00:00

Coverity ID: 11927

LDAP: Use domain-specific name where appropriate

2013-07-24T11:52:33+00:00

The subdomain users user FQDN in their name attribute. However, handling
of whether to use FQDN in the LDAP code was not really good. This patch
introduces a utility function and converts code that was relying on
user/group names matching to this utility function.

This is a temporary fix until we can refactor the sysdb API in #2011.

SIGCHLD handler: do not call callback when pvt data where freed

2013-07-17T13:01:51+00:00

https://fedorahosted.org/sssd/ticket/1992

print hint about password complexity when new password is rejected

2013-07-17T11:13:28+00:00

https://fedorahosted.org/sssd/ticket/1827

LDAP: When resolving a SID, search for groups first, then users

2013-07-17T11:13:10+00:00

https://fedorahosted.org/sssd/ticket/1997

Most of the time, the SIDs are resolved as a call coming from the PAC
responder during initgroups. In that case at least, it makes sense to
search for group matching that SID first, then users.

We may consider making this behaviour configurable ie for the server
mode where typically the users should be queried first.