summaryrefslogtreecommitdiff
path: root/src/providers/ipa/ipa_subdomains_ext_groups.c
AgeCommit message (Collapse)AuthorFilesLines
2013-09-11Use right formating to print stringLukas Slebodnik1-1/+1
format specifies type 'int' but the argument has type 'const char *'
2013-09-11Fix formating of variables with type: size_tLukas Slebodnik1-1/+1
2013-09-05Fix warning missing argumentsLukas Slebodnik1-1/+1
2013-08-28ipa-server-mode: add IPA group memberships to AD usersSumit Bose1-0/+924
When IPA trusts an AD domain the AD user or groups can be placed into IPA groups e.g. to put AD users under the control of HBAC. Since IPA group can only have members from the IPA directory tree and the AD users and groups are not stored there a special IPA object called external group was introduced. SIDs of users and groups can be added to the external group and since the external groups are in the IPA directory tree they can be member of IPA groups. To speed things up and to remove some load from the IPA servers SSSD reads all external groups and stores them in memory for some time before rereading the data. Enhances https://fedorahosted.org/sssd/ticket/1962