summaryrefslogtreecommitdiff
path: root/src/util/domain_info_utils.c
AgeCommit message (Collapse)AuthorFilesLines
2013-09-27ipa_server_mode: write capaths to krb5 include fileSumit Bose1-1/+50
If there are member domains in a trusted forest which are DNS-wise not proper children of the forest root the IPA KDC needs some help to determine the right authentication path. In general this should be done internally by the IPA KDC but this works requires more effort than letting sssd write the needed data to the include file for krb5.conf. If this functionality is available for the IPA KDC this patch might be removed from the sssd tree. Fixes https://fedorahosted.org/sssd/ticket/2093
2013-09-27IPA: store forest name for forest member domainsSumit Bose1-1/+10
In order to fix https://fedorahosted.org/sssd/ticket/2093 the name of the forest must be known for a member domain of the forest.
2013-09-26util: add get_domains_head()Pavel Březina1-0/+13
This function will return head of the domain list. Resolves: https://fedorahosted.org/sssd/ticket/2066
2013-09-17util: add find_subdomain_by_object_name()Pavel Březina1-0/+35
This function will parse object name into name and domain name part and return appropriate sss domain. Resolves: https://fedorahosted.org/sssd/ticket/2034
2013-09-17util: add find_subdomain_by_sid()Pavel Březina1-0/+33
This function takes domain SID (doesn't have the last component) or object SID (have all components) and returns subdomain. The subdomain is found by comparing domain->domainid with the SID. E.g. domain SID: S-1-5-21-3940105347-3434501867-2690409756 object SID: S-1-5-21-3940105347-3434501867-2690409756-513 Resolves: https://fedorahosted.org/sssd/ticket/2034
2013-08-28Add a new option to control subdomain enumerationJakub Hrozek1-0/+25
2013-08-28Read enumerate state for subdomains from cacheJakub Hrozek1-2/+3
The enumerate flag will be read from the cache for subdomains and the domain object will be created accordingly.
2013-06-28Read mpg state for subdomains from cacheSumit Bose1-2/+3
The mpg flag will be read from the cache for subdomains and the domain object will be created accordingly.
2013-06-27Add missing argument to DEBUG messageLukas Slebodnik1-1/+1
2013-06-27AD: Write out domain-realm mappingsJakub Hrozek1-0/+185
This patch reuses the code from IPA provider to make sure that domain-realm mappings are written even for AD sub domains.
2013-03-04Improved readability of get_next_domain()Lukas Slebodnik1-2/+2
https://fedorahosted.org/sssd/ticket/1812
2013-02-14get_next_domain() test dom->parent->next for NULLPavel Březina1-1/+1
Otherwise dom may be set to NULL and we will segfault when dereferencing dom.
2013-02-10Introduce IS_SUBDOMAIN() macroSimo Sorce1-1/+1
Fixes https://fedorahosted.org/sssd/ticket/1766
2013-02-10Change the way domains are linked.Simo Sorce1-10/+23
- Use a double-linked list for domains and subdomains. - Never remove a subdomain, simply mark it as disabled if it becomes unused. - Rework the way subdomains are refreshed. Now sysdb_update_subdomains() actually updates the current subdomains and marks as disabled the ones not found in the sysdb or add new ones found. It never removes them. Removal of missing domains from sysdb is deferred to the providers, which will perform it at refresh time, for the ipa provider that is done by ipa_subdomains_write_mappings() now. sysdb_update_subdomains() is then used to update the memory hierarchy of the subdomains. - Removes sysdb_get_subdomains() - Removes copy_subdomain() - Add sysdb_subdomain_delete()
2013-02-10Add ability to disable domainsSimo Sorce1-8/+12
2013-02-10Add function get_next_domain()Simo Sorce1-0/+18
Use this function instead of explicitly calling domain->next This function allows to get the next primary domain or to descend into the subdomains and replaces also get_next_dom_or_subdom()
2013-02-10Avoid sysdb_subdom in sysdb_get_subdomains()Simo Sorce1-0/+3
2013-02-10Add realm info to sss_domain_infoSimo Sorce1-1/+11
2013-01-15Stop creating fake sysdb contextsSimo Sorce1-7/+2
Now that the sysdb context does not contain anymore domain related data we can simply stop creating faxe sysdb context and just reference the parent context.
2013-01-15Move mpg flag to the domain where it belongsSimo Sorce1-0/+1
A sysdb contains now multiple domains, but the mpg property is a property of a specific domain not of the underlying database.
2013-01-15Pass domain to sysdb_get<pw/gr>nam() functionsSimo Sorce1-1/+1
Also allows us to remove sysdb_subdom_get<pw/gr>nam() wrappers and restore fqnames proper value in subdomains, by testing for a parent domain being present or not.
2013-01-15Refactor single domain initializationSimo Sorce1-0/+34
Bring it out of sysdb, which will slowly remove internal dependencies on domains and instead will always require them to be passed by callers.
2012-11-19Refactor the way subdomain accounts are savedSimo Sorce1-1/+1
The original sysdb code had a strong assumption that only users from one domain are saved in the databse, with the subdomain feature, we have changed reality, but have not adjusted all the code arund the sysdb calls to not rely on the original assumption. One of the side effects of this incongrunece is that currently group memberships do not return fully qualified names for subdomain users as they should. In oreder to fix this and other potential issues surrounding the violation of the original assumption, we need to fully qualify subdomain user names. By savin them fully qualified we do not risk aliasing local users and have group memberhips or other name based matching code mistake a domain user with subdomain usr or vice versa.
2012-10-26Make sub-domains case-insensitiveSumit Bose1-1/+1
Currently the only type of supported sub-domains are AD domains which are not case-sensitive. To make it easier for Windows user we make sub-domains case-insensitive as well which allows to write the username in any case at the login prompt. If support for other types of sub-domains is added it might be necessary to set the case-sensitive flag based on the domain type.
2012-06-12Make re_expression and full_name_format per domain optionsStef Walter1-0/+1
* Allows different user/domain qualified names for different domains. For example Domain\User or user@domain. * The global re_expression and full_name_format options remain as defaults for the domains. * Subdomains get the re_expression and full_name_format of their parent domain. https://bugzilla.redhat.com/show_bug.cgi?id=811663
2012-05-04Modify behavior of pam_pwd_expiration_warningJan Zeleny1-0/+1
New option pwd_expiration_warning is introduced which can be set per domain and can override the value specified by the original pam_pwd_expiration_warning. If the value of expiration warning is set to zero, the filter isn't apllied at all - if backend server returns the warning, it will be automatically displayed. Default value for Kerberos: 7 days Default value for LDAP: don't apply the filter Technical note: default value when creating the domain is -1. This is important so we can distinguish between "no value set" and 0. Without this possibility it would be impossible to set different values for LDAP and Kerberos provider.
2012-04-24Two fixes in responder subdomain codeJan Zeleny1-1/+1
2012-04-24New config option for subdomainsJan Zeleny1-0/+2
subdomain_homedir - if set, it contains default value, can be overriden in further processing
2012-04-24Add conn_name to allow different names for domains and connectionsJan Zeleny1-2/+2
2012-04-24Add some utility functions for subdomainsJan Zeleny1-0/+110
generated by cgit (git 2.34.1) at 2024-11-01 01:27:27 +0000