sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2013-06-07	LDAP: return sdap search return code to ID	Jakub Hrozek	1	-3/+12
	By default, the LDAP searches delete the entry from cache if it wasn't found during a search. But if a search wants to try both Global Catalog and LDAP, for example, it might be beneficial to have an option to only delete the entry from cache after the last operation fails to prevent unnecessary memberof operations for example.
2013-06-07	LDAP: new SDAP domain structure	Jakub Hrozek	1	-3/+6
	Previously an sdap_id_ctx was always tied to one domain with a single set of search bases. But with the introduction of Global Catalog lookups, primary domain and subdomains might have different search bases. This patch introduces a new structure sdap_domain that contains an sssd domain or subdomain and a set of search bases. With this patch, there is only one sdap_domain that describes the primary domain.
2013-06-07	LDAP: Pass in a connection to ID functions	Jakub Hrozek	1	-1/+4
	Instead of using the default connection from the sdap_id_ctx, allow the caller to specify which connection shall be used for this particular request. Again, no functional change is present in this patch, just another parameter is added.
2013-06-07	LDAP: sdap_id_ctx might contain several connections	Jakub Hrozek	1	-1/+1
	With some LDAP server implementations, one server might provide different "views" of the identites on different ports. One example is the Active Directory Global catalog. The provider would contact different view depending on which operation it is performing and against which SSSD domain. At the same time, these views run on the same server, which means the same server options, enumeration, cleanup or Kerberos service should be used. So instead of using several different failover ports or several instances of sdap_id_ctx, this patch introduces a new "struct sdap_id_conn_ctx" that contains the connection cache to the particular view and an instance of "struct sdap_options" that contains the URI. No functional changes are present in this patch, currently all providers use a single connection. Multiple connections will be used later in the upcoming patches.
2013-01-21	Remove sysdb as a be context structure member	Simo Sorce	1	-1/+1
	The sysdb context is already available through the 'domain' structure.
2013-01-15	Add domain arguments to sysdb services functions	Simo Sorce	1	-2/+2
	also fix sysdb_svc_add declarations
2012-05-31	Add support for filtering atributes	Jan Zeleny	1	-1/+2
	This patch adds support for filtering attributes when constructing attribute list from a map for LDAP query.
2012-05-10	LDAP: Add attr_count return value to build_attrs_from_map()	Stephen Gallagher	1	-1/+1
	This is necessary because in several places in the code, we are appending to the attrs returned from this value, and if we relied on the map size macro, we would be appending after the NULL terminator if one or more attributes were defined as NULL.
2012-03-26	LDAP services: Keep the protocol around	Jakub Hrozek	1	-0/+1

2012-01-31	LDAP: Add support for service lookups (non-enum)	Stephen Gallagher	1	-0/+290