Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
Previously an sdap_id_ctx was always tied to one domain with a single
set of search bases. But with the introduction of Global Catalog
lookups, primary domain and subdomains might have different search
bases.
This patch introduces a new structure sdap_domain that contains an sssd
domain or subdomain and a set of search bases. With this patch, there is
only one sdap_domain that describes the primary domain.
|
|
|
|
https://fedorahosted.org/sssd/ticket/1519
IPA host refactoring changed mapping of memberOf attribute
which caused SSSD being unable to retrieve membership of
hostgroup when being interpreted as netgroup.
|
|
This patch adds support for filtering attributes when constructing
attribute list from a map for LDAP query.
|
|
This is necessary because in several places in the code, we are
appending to the attrs returned from this value, and if we relied
on the map size macro, we would be appending after the NULL
terminator if one or more attributes were defined as NULL.
|
|
If the code fell through the loop, ret would have been random value.
|
|
https://fedorahosted.org/sssd/ticket/1136
|
|
|
|
The paging control can cause issues on servers that put limits on
how many paging controls can be active at one time (on some
servers, it is limited to one per connection). We need to reduce
our usage so that we only activate the paging control when making
a request that may return an arbitrary number of results.
https://fedorahosted.org/sssd/ticket/1202 phase one
|
|
This issue led to a netgroup with one triple (-,-,domain) when it
contained no triples on the IPA server.
|
|
|
|
https://fedorahosted.org/sssd/ticket/1016
|
|
https://fedorahosted.org/sssd/ticket/1152
|
|
|
|
DEBUG message can print an unitialized value if the first netgroup
has no members.
Coverity 12382
|
|
In case IPA netgroup had indirect member hosts, they wouldn't be
detected.
This patch also modifies debug messages for easier debugging in the
future.
|
|
|
|
|
|
|