sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2012-11-14	Run IPA subdomain provider if IPA ID provider is configured	Sumit Bose	1	-1/+67
	To make configuration easier the IPA subdomain provider should be always loaded if the IPA ID provider is configured and the subdomain provider is not explicitly disabled. But to avoid the overhead of regular subdomain requests in setups where no subdomains are used the IPA subdomain provider should behave differently if configured explicit or implicit. If the IPA subdomain provider is configured explicitly, i.e. 'subdomains_provider = ipa' can be found in the domain section of sssd.conf subdomain request are always send to the server if needed. If it is configured implicitly and a request to the server fails with an indication that the server currently does not support subdomains at all, e.g. is not configured to handle trust relationships, a new request will be only send to the server after a long timeout or after a going-online event. To be able to make this distinction this patch save the configuration status to the subdomain context. Fixes https://fedorahosted.org/sssd/ticket/1613
2012-10-12	Allow extdom exop to return flat domain name as well	Sumit Bose	1	-0/+24
	There are case where the extdom extended operation will return the flat or NetBIOS name of a domain instead of the DNS domain name. If this name is available for the current domain we accept it as well. Related to https://fedorahosted.org/sssd/ticket/1561
2012-08-23	Consolidation of functions that make realm upper-case	Ondrej Kos	1	-17/+1

2012-08-06	IPA: Securely set umask for mkstemp in subdomain provider	Stephen Gallagher	1	-0/+3
	https://fedorahosted.org/sssd/ticket/1457
2012-08-06	IPA: Do not attempt to close the same file twice	Stephen Gallagher	1	-1/+1
	https://fedorahosted.org/sssd/ticket/1456
2012-08-01	Create a domain-realm mapping for krb5.conf to be included	Jakub Hrozek	1	-0/+135
	When new subdomains are discovered, the SSSD creates a file that includes the domain-realm mappings. This file can in turn be included in the krb5.conf using the includedir directive, such as: includedir /var/lib/sss/pubconf/realm_mappings
2012-08-01	Add automatic periodic retrieval of subdomains	Simo Sorce	1	-1/+44

2012-08-01	Add online callback to enumerate subdomains	Simo Sorce	1	-24/+49

2012-08-01	Limit refreshes keeping track of last refresh time	Simo Sorce	1	-26/+46

2012-08-01	Change refreshing of subdomains	Simo Sorce	1	-65/+156
	This patch keeps a local copy of the subdomains in the ipa subdomains plugin context. This has 2 advantages: 1. allows to check if anything changed w/o always hitting the sysdb. 2. later will allows us to dump this information w/o having to retrieve it again. The timestamp also allows to avoid refreshing too often.
2012-08-01	Expose an initializer function from subdomain	Simo Sorce	1	-0/+35
	Instead of exporting internal structures, expose an initilizer function like the autofs code and initialize everything inside the ipa_subdomains.c file.
2012-08-01	Add realm paramter to subdomain list	Simo Sorce	1	-0/+27
	This will be used later for setting domain_realm mappings in krb5.conf
2012-08-01	Use a more tractable name for subdomain request	Simo Sorce	1	-7/+5
	I am all for readable names, but there is a tradeof between expressing purpose and compactness.
2012-08-01	80 col and style fixes	Simo Sorce	1	-20/+48
	Something like this: sysdb = (be_req->sysdb)?be_req->sysdb:be_req->be_ctx->sysdb; really is not readable, and we always discourage using obfuscated C, please refrain in future.
2012-08-01	Make structure initializer more readable	Simo Sorce	1	-7/+15

2012-08-01	Fix wrong elements used in comparison	Simo Sorce	1	-1/+1

2012-08-01	Change subdomain_info	Simo Sorce	1	-6/+6
	Rename the structure to use a standard name prefix so it is properly name-spaced, in preparation for changing the structure itself.
2012-07-10	Remove dead code in ipa_subdomains_handler_done()	Sumit Bose	1	-1/+1
	Fixes https://fedorahosted.org/sssd/ticket/1410
2012-06-21	Add support for ID ranges	Sumit Bose	1	-10/+166

2012-06-10	IPA subdomains - ask for information about master domain	Jan Zeleny	1	-15/+132
	The query is performed only if there is missing information in the cache. That means this should be done only once after restart when cache doesn't exist. All subsequent requests for subdomains won't include the request for master domain.
2012-04-24	IPA: Add get-domains target	Sumit Bose	1	-0/+319