summaryrefslogtreecommitdiff
path: root/src/providers/ldap/sdap_idmap.c
AgeCommit message (Collapse)AuthorFilesLines
2013-09-17util: add sss_idmap_talloc[_free]Pavel Březina1-14/+3
Remove code duplication.
2013-09-11Fix formating of variables with type: id_tLukas Slebodnik1-5/+7
2013-06-28Add sdap_idmap_domain_has_algorithmic_mapping()Sumit Bose1-0/+59
This patch implements a wrapper for sss_idmap_domain_has_algorithmic_mapping() for the sdap ID mapping. Fixes https://fedorahosted.org/sssd/ticket/1960
2013-06-28Allow different methods to find new domains for idmappingSumit Bose1-3/+20
Currently the range management code is in the generic LDAP provider and can be used by the LDAP and AD provider. New ranges are allocated with the help of a hash value of the domain SID. If the IPA provider cannot find a range for a given domain it cannot allocate a new range on its own but has to look up the idrange objects on the FreeIPA server and use them accordingly. To allow the LDAP, AD and IPA provider to use as much common code as possible a plugin interface, similar to the one used to find the DNS site, to find a missing range would be useful. The default plugin will be used by the LDAP and the AD provider and the IPA provider will implement a plugin to read the data from the server. Fixes https://fedorahosted.org/sssd/ticket/1961
2013-06-28SDAP IDMAP: Add configured domain to idmap contextSumit Bose1-0/+70
To allow libsss_idmap to manage all id-ranges the id-ranges of the domains configured in sssd.conf which are currently unmanaged must be added to libsss_idmap.
2013-05-27Fail with misconfigured id-mapping rangesOndrej Kos1-1/+2
https://fedorahosted.org/sssd/ticket/1930 On misconfigured id-mapping range variables, the provider should not start. We were internally correctly setting error code for failure, but interruption of startup was not performed. Also raised the debug level of message for this misconfiguration.
2013-05-13Re-add a useful DEBUG messageJakub Hrozek1-0/+2
In commit 46222e5191473f9a46aec581273eb2eef22e23be we removed a very similar DEBUG message while moving the whole piece of code to the idmap library. But it turned out that the DEBUG message was useful while testing the functionality, so this patch adds it back.
2013-04-29libsss_idmap: function to calculate rangeMichal Zidek1-107/+54
Calculation of range for domains is moved from sdap_idmap code to sss_idmap code. Some refactoring have been done to allow this move. https://fedorahosted.org/sssd/ticket/1844
2013-01-21Remove sysdb as a be context structure memberSimo Sorce1-2/+2
The sysdb context is already available through the 'domain' structure.
2013-01-15Add domain argument to sysdb_idmap_ funcitonsSimo Sorce1-1/+2
2012-11-28idmap: Silence DEBUG messages when dealing with built-in SIDs.Michal Zidek1-7/+18
When converting built-in SID to unix GID/UID a confusing debug message about the failed conversion was printed. This patch special cases these built-in objects. https://fedorahosted.org/sssd/ticket/1593
2012-10-04Slices calculation is alway wrong for default valuesOndrej Kos1-2/+2
2012-09-24AD: autorid compatibility should recommend the use of default domainStephen Gallagher1-4/+4
Previously, we were failing to start if ldap_idmap_autorid_compat was True but the default domain SID was unspecified. This is the recommended configuration, but it is functional without it. There is just a slight risk that the IDs will be inconsistent between machines if the first user requested is not from the default domain. https://fedorahosted.org/sssd/ticket/1530
2012-05-03LDAP: Add helper function to map IDsStephen Gallagher1-0/+62
This function will also auto-create a new ID map if the domain has not been seen previously.
2012-05-03LDAP: Add routine to extract domain SID from an object SIDStephen Gallagher1-0/+44
Also makes the domain prefix macros from sss_idmap public.
2012-05-03LDAP: Allow setting a default domain for id-mapping slice 0Stephen Gallagher1-0/+36
2012-05-03LDAP: Add autorid compatibility modeStephen Gallagher1-8/+14
2012-05-03LDAP: Add helper routines for ID-mappingStephen Gallagher1-0/+282