sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2013-01-15	Pass domain to sysdb_get<pw/gr>nam() functions	Simo Sorce	1	-40/+0
	Also allows us to remove sysdb_subdom_get<pw/gr>nam() wrappers and restore fqnames proper value in subdomains, by testing for a parent domain being present or not.
2012-11-20	LDAP: Only convert direct parents' ghost attribute to member	Jakub Hrozek	1	-1/+1
	https://fedorahosted.org/sssd/ticket/1612 This patch changes the handling of ghost attributes when saving the actual user entry. Instead of always linking all groups that contained the ghost attribute with the new user entry, the original member attributes are now saved in the group object and the user entry is only linked with its direct parents. As the member attribute is compared against the originalDN of the user, if either the originalDN or the originalMember attributes are missing, the user object is linked with all the groups as a fallback. The original member attributes are only saved if the LDAP schema supports nesting.
2012-11-19	Refactor the way subdomain accounts are saved	Simo Sorce	1	-0/+40
	The original sysdb code had a strong assumption that only users from one domain are saved in the databse, with the subdomain feature, we have changed reality, but have not adjusted all the code arund the sysdb calls to not rely on the original assumption. One of the side effects of this incongrunece is that currently group memberships do not return fully qualified names for subdomain users as they should. In oreder to fix this and other potential issues surrounding the violation of the original assumption, we need to fully qualify subdomain user names. By savin them fully qualified we do not risk aliasing local users and have group memberhips or other name based matching code mistake a domain user with subdomain usr or vice versa.
2012-10-01	sysdb_master_domain_get_info: fix copy-and-paste error	Sumit Bose	1	-2/+2

2012-09-10	SYSDB: NULL-terminate the output of sysdb_get_{ranges,subdomains}	Jakub Hrozek	1	-1/+3

2012-09-04	Unify usage of sysdb transactions (part 2).	Michal Zidek	1	-3/+3

2012-08-01	Change refreshing of subdomains	Simo Sorce	1	-6/+7
	This patch keeps a local copy of the subdomains in the ipa subdomains plugin context. This has 2 advantages: 1. allows to check if anything changed w/o always hitting the sysdb. 2. later will allows us to dump this information w/o having to retrieve it again. The timestamp also allows to avoid refreshing too often.
2012-08-01	Add realm paramter to subdomain list	Simo Sorce	1	-0/+58
	This will be used later for setting domain_realm mappings in krb5.conf
2012-08-01	Fix return error and debug message	Simo Sorce	1	-2/+7
	The debuf message was trying to print the number of returned entries, but no integer was provided. Return ENOENT as the error for when there are no entries, not EINVAL.
2012-08-01	Use ldb_msg_add_string with bare strings	Simo Sorce	1	-9/+7

2012-08-01	Fix wrong elements used in comparison	Simo Sorce	1	-2/+2

2012-08-01	Fix double semi-colons	Simo Sorce	1	-5/+5

2012-08-01	80 columns police	Simo Sorce	1	-8/+13

2012-08-01	Change subdomain_info	Simo Sorce	1	-12/+12
	Rename the structure to use a standard name prefix so it is properly name-spaced, in preparation for changing the structure itself.
2012-06-10	IPA subdomains - ask for information about master domain	Jan Zeleny	1	-0/+166
	The query is performed only if there is missing information in the cache. That means this should be done only once after restart when cache doesn't exist. All subsequent requests for subdomains won't include the request for master domain.
2012-04-24	Sysdb routines for subdomains	Jan Zeleny	1	-0/+435