sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2013-10-15	LDAP: Set default value for dyndns update to false	Lukas Slebodnik	1	-1/+1
	In some cases, local boolean variable "do_update" could be used without proper initialisation. Clang static analyser warning: "Assigned value is garbage or undefined" It was not a big problem, because non-zero value for boolean variable mean true.
2013-09-24	Include header file in implementation module.	Lukas Slebodnik	1	-0/+1
	Declarations of public functions was in header files, but header files was not included in implementation file.
2013-06-07	LDAP: sdap_id_ctx might contain several connections	Jakub Hrozek	1	-2/+2
	With some LDAP server implementations, one server might provide different "views" of the identites on different ports. One example is the Active Directory Global catalog. The provider would contact different view depending on which operation it is performing and against which SSSD domain. At the same time, these views run on the same server, which means the same server options, enumeration, cleanup or Kerberos service should be used. So instead of using several different failover ports or several instances of sdap_id_ctx, this patch introduces a new "struct sdap_id_conn_ctx" that contains the connection cache to the particular view and an instance of "struct sdap_options" that contains the URI. No functional changes are present in this patch, currently all providers use a single connection. Multiple connections will be used later in the upcoming patches.
2013-05-03	Split out the common code from timed DNS updates	Jakub Hrozek	1	-0/+108

2013-05-03	dyndns: new option dyndns_auth	Jakub Hrozek	1	-2/+6
	This options is mostly provided for future expansion. Currently it is undocumented and both IPA and AD dynamic DNS updates default to GSS-TSIG. Allowed values are GSS-TSIG and none.
2013-05-03	dyndns: new option dyndns_force_tcp	Jakub Hrozek	1	-2/+6
	https://fedorahosted.org/sssd/ticket/1831 Adds a new option that can be used to force nsupdate to only use TCP to communicate with the DNS server.
2013-05-03	dyndns: New option dyndns_update_ptr	Jakub Hrozek	1	-36/+159
	https://fedorahosted.org/sssd/ticket/1832 While some servers, such as FreeIPA allow the PTR record to be synchronized when the forward record is updated, other servers, including Active Directory, require that the PTR record is synchronized manually. This patch adds a new option, dyndns_update_ptr that automatically generates appropriate DNS update message for updating the reverse zone. This option is off by default in the IPA provider. Also renames be_nsupdate_create_msg to be_nsupdate_create_fwd_msg
2013-05-03	Refactor dynamic DNS updates	Jakub Hrozek	1	-0/+498
	Provides two new layers instead of the previous IPA specific layer: 1) dp_dyndns.c -- a very generic dyndns layer on the DP level. Its purpose it to make it possible for any back end to use dynamic DNS updates. 2) sdap_dyndns.c -- a wrapper around dp_dyndns.c that utilizes some LDAP-specific features like autodetecting the address from the LDAP connection. Also converts the dyndns code to new specific error codes.