Code

IPA IPA Trust WIP#69

Code

Open

justin-stephenson wants to merge 119 commits intomasterjustin-stephenson/sssd:masterfrom idm_idm_trust_wipjustin-stephenson/sssd:idm_idm_trust_wipCopy head branch name to clipboard

+45,055-41,858

Commits

Commits on Sep 20, 2024

• Require OpenSSL >= 1.0.1

  Show description for a86ee64
  alexey-tikhonov

  committed
  a86ee64

• pam: only set SYSDB_LOCAL_SMARTCARD_AUTH to 'true' but never to 'false'.

  Show description for 67ba42c
  

  sumit-bose

  authored and

  alexey-tikhonov

  committed
  67ba42c

Commits on Sep 24, 2024

• sdap: allow to provide user_map when looking up group memberships

  Show description for 69f63f1
  

  sumit-bose

  authored and

  alexey-tikhonov

  committed
  69f63f1

• ad: use default user_map when looking of host groups for GPO

  Show description for 5f5077a
  

  sumit-bose

  authored and

  alexey-tikhonov

  committed
  5f5077a

Commits on Sep 25, 2024

• SYSTEMD: chown gpo-cache as well

  Show description for f6ad182
  alexey-tikhonov

  committed
  f6ad182

• SSH: sss_ssh_knownhosts must accept port numbers

  Show description for 823d787
  

  aplopez

  authored and

  alexey-tikhonov

  committed
  823d787

Commits on Sep 27, 2024

• CLIENT:PAM: replace deprecated _pam_overwrite

  Show description for 0330ebe
  alexey-tikhonov

  committed
  0330ebe

• Revert "ci: allow deprecated functions during build"

  Show description for 312e0eb
  alexey-tikhonov

  committed
  312e0eb

• SPEC: use '/run/sssd' as a home dir for 'sssd' user

  Show description for 10bf7ab
  alexey-tikhonov

  committed
  10bf7ab

Commits on Sep 30, 2024

• tests: improving gpo tests to be run against ad and samba

  Show description for ef2a618
  

  Dan Lavu

  authored and

  alexey-tikhonov

  committed
  ef2a618

Commits on Oct 1, 2024

• CLIENT:PAM: avoid NULL deref

  Show description for 3985624
  alexey-tikhonov

  committed
  3985624

• SPEC: keep 'sssd-polkit-rules' on RHEL9

  Show description for 60f282d
  alexey-tikhonov

  committed
  60f282d

• fixed memory leak due to use popt incorrectly

  Show description for cb93196
  

  xuraoqing

  authored and

  alexey-tikhonov

  committed
  cb93196

• sdap: Log hint for ignore unreadable references

  Show description for 3a64416
  

  justin-stephenson

  authored and

  alexey-tikhonov

  committed
  3a64416

• tests: removing intg/test_sudo.py

  Show description for b1bee78
  

  Dan Lavu

  authored and

  alexey-tikhonov

  committed
  b1bee78

• tests: removing intg/test_kcm.py

  Show description for 4295e00
  

  Dan Lavu

  authored and

  alexey-tikhonov

  committed
  4295e00

Commits on Oct 4, 2024

• make_srpm: fallback to tar if git archive fails

  Show description for b4bca98
  pbrezina

  committed
  b4bca98

Commits on Oct 7, 2024

• conf: remove unused reconnection_retries

  Show description for 8be2172
  

  pbrezina

  authored and

  alexey-tikhonov

  committed
  8be2172

Commits on Oct 9, 2024

• MONITOR: Link DbusConnection and sbus_connection

  Show description for 1c91ea0
  

  aplopez

  authored and

  alexey-tikhonov

  committed
  1c91ea0

• MONITOR: Set destructor for the right connection

  Show description for e0ec488
  

  aplopez

  authored and

  alexey-tikhonov

  committed
  e0ec488

• sbus: terminate ongoing chained requests if backend is restarted

  Show description for 263cb2e
  

  pbrezina

  authored and

  alexey-tikhonov

  committed
  263cb2e

Commits on Oct 14, 2024

• rpm: drop the --remote argument from git-archive call

  Show description for c1434c1
  

  praiskup

  authored and

  pbrezina

  committed
  c1434c1

• tests: Update ldap test to use journal utility.

  Show description for 17c37e4
  

  jakub-vavra-cz

  authored and

  pbrezina

  committed
  17c37e4

• BE: Maintain the list of periodic tasks

  Show description for 36d8289
  

  scabrero

  authored and

  pbrezina

  committed
  36d8289

• WATCHDOG: Use a constant instead of the signal name

  Show description for 423e5b9
  

  scabrero

  authored and

  pbrezina

  committed
  423e5b9

• WATCHDOG: Send SIGRTMIN+1 signal when clock shift is detected

  Show description for fae131a
  

  scabrero

  authored and

  pbrezina

  committed
  fae131a

• BE: Handle SIGRTMIN+1 signal to reschedule periodic tasks

  Show description for 07ce89e
  

  scabrero

  authored and

  pbrezina

  committed
  07ce89e

• MAN: Document SIGRTMIN+1 signal usage

  Show description for fdf7e75
  

  scabrero

  authored and

  pbrezina

  committed
  fdf7e75

• Move 'nscd' helper functions out of 'utils'

  Show description for c9026bf
  alexey-tikhonov

  committed
  c9026bf

• CONFDB: introduce helper to read a full list of configured services,

  Show description for 7f0f5a6
  alexey-tikhonov

  committed
  7f0f5a6

• IFP: use new helper to retrieve services list

  Show description for 28bb146
  alexey-tikhonov

  committed
  28bb146

• socket_activated_responders: check confdb

  Show description for 59c48f7
  alexey-tikhonov

  committed
  59c48f7

• socket_activated_responders: log to syslog instead of stdout

  Show description for 32e7616
  alexey-tikhonov

  committed
  32e7616

• TESTS:INTG: 'implicit files domain' not supported

  Show description for 272ee81
  alexey-tikhonov

  committed
  272ee81

• CONFDB: don't hard fail in add_implicit_services()

  Show description for dbf4763
  alexey-tikhonov

  committed
  dbf4763

• CONFDB: mistype fix

  Show description for 9bb7b92
  alexey-tikhonov

  committed
  9bb7b92

Commits on Oct 15, 2024

• po: update translations

  Show description for c265745
  

  weblate

  authored and

  pbrezina

  committed
  c265745

• po: update translations

  Show description for f09a66c
  

  Elena Mishina

  authored and

  pbrezina

  committed
  f09a66c

• po: fix sv language

  pbrezina

  committed
  2eef90a

• pot: update pot files

  pbrezina

  committed
  6ec5aa0

• Release sssd-2.10.0

  pbrezina

  committed
  217b3fa

• Update version in version.m4 to track the next release

  pbrezina

  committed
  0e8e694

• Tests: sss_ssh_knownhosts with port number

  Show description for 247797b
  

  madhuriupadhye

  authored and

  alexey-tikhonov

  committed
  247797b

• Tests: Mark builtwith for knownhosts tests

  Show description for 163b1e3
  

  madhuriupadhye

  authored and

  alexey-tikhonov

  committed
  163b1e3

• tests: rm intg/test_sss_cache.py

  Show description for 934ae04
  

  Dan Lavu

  authored and

  alexey-tikhonov

  committed
  934ae04

• ldap: add 'exop_force' value for ldap_pwmodify_mode

  Show description for 7184541
  

  sumit-bose

  authored and

  alexey-tikhonov

  committed
  7184541

• tests: add 'expo_force' tests

  Show description for deefe9a
  

  sumit-bose

  authored and

  alexey-tikhonov

  committed
  deefe9a

• Test: Passkey test cases with diffferent auth_methods

  Show description for 94e47c5
  

  madhuriupadhye

  authored and

  alexey-tikhonov

  committed
  94e47c5

Commits on Oct 17, 2024

• Tests: Add missing returncode to test_0004_bz1638295

  Show description for 4a7ab02
  jakub-vavra-cz

  committed
  4a7ab02

• When using SPDX expression the booleans must be in all caps.

  Show description for cbe3b03
  alexey-tikhonov

  committed
  cbe3b03

• Get rid of on-house MIN/MAX definitions

  Show description for b928dbe
  alexey-tikhonov

  committed
  b928dbe

Commits on Oct 18, 2024

• tests: Unify packages available on client for ipa suites

  Show description for ed666e9
  jakub-vavra-cz

  committed
  ed666e9

Commits on Oct 21, 2024

• build: remove superfluous WITH_IFP leftover

  Show description for a2e91d2
  

  jengelh

  authored and

  alexey-tikhonov

  committed
  a2e91d2

• man: sssd.conf update defaults for certmap maprule

  Show description for 510130e
  

  spoore1

  authored and

  alexey-tikhonov

  committed
  510130e

• sssd: always print path when config object is rejected

  Show description for 2b7915d
  

  jengelh

  authored and

  alexey-tikhonov

  committed
  2b7915d

• ad: honor ad_use_ldaps setting with ad_machine_pw_renewal

  Show description for d004e7b
  

  santeri3700

  authored and

  alexey-tikhonov

  committed
  d004e7b

Commits on Oct 23, 2024

• SPEC: require systemtap-sdt-dtrace on ELN

  Show description for 6b22190
  

  yselkowitz

  authored and

  alexey-tikhonov

  committed
  6b22190

• Missing 'dns_update_per_family' option

  Show description for a822206
  

  thalman

  authored and

  alexey-tikhonov

  committed
  a822206

• build: unbreak detection for x400Address

  Show description for 42d1837
  

  jengelh

  authored and

  alexey-tikhonov

  committed
  42d1837

• DEBUG: add 'debug_backtrace_enable' getter

  Show description for b84ced0
  alexey-tikhonov

  committed
  b84ced0

• UTILS: simplify / comment a bit better

  Show description for 2300abb
  alexey-tikhonov

  committed
  2300abb

• DEBUG: propagate debug_backtrace_enabled to child processes

  Show description for 88b55de
  alexey-tikhonov

  committed
  88b55de

Commits on Oct 25, 2024

• build: stop overriding CFLAGS

  Show description for 8cdebfc
  

  jengelh

  authored and

  alexey-tikhonov

  committed
  8cdebfc

Commits on Nov 1, 2024

• INI: remove unused helpers

  Show description for 30a9803
  alexey-tikhonov

  committed
  30a9803

• INI: stop using 'libini_config' for access check

  Show description for 1d19b8a
  alexey-tikhonov

  committed
  1d19b8a

• INI: relax config files checks

  Show description for 8472777
  alexey-tikhonov

  committed
  8472777

• Configuration: make sure /etc/sssd and everything

  Show description for 518db32
  alexey-tikhonov

  committed
  518db32

• INI: don't report used snippets in sss_ini_add_snippets()

  Show description for d7c9770
  alexey-tikhonov

  committed
  d7c9770

• SSSCTL: change error message to be more accurate

  Show description for 4cc62d4
  alexey-tikhonov

  committed
  4cc62d4

• INI: add verbose error messages

  Show description for 60d369c
  alexey-tikhonov

  committed
  60d369c

• build: fix spellos in configure.ac

  Show description for 93eb073
  

  jengelh

  authored and

  alexey-tikhonov

  committed
  93eb073

• chown() gpo cache recursively.

  Show description for 2d0f048
  alexey-tikhonov

  committed
  2d0f048

Commits on Nov 7, 2024

• SSH: sss_ssh_knownhosts must ignore DNS errors

  Show description for 7668205
  

  aplopez

  authored and

  alexey-tikhonov

  committed
  7668205

• tests: adding gpo customer test scenario to use the ldap attribute name

  Show description for 3054970
  

  Dan Lavu

  authored and

  alexey-tikhonov

  committed
  3054970

Commits on Nov 9, 2024

• ipa: Check sudo command threshold correctly

  Show description for 7a8da27
  

  justin-stephenson

  authored and

  alexey-tikhonov

  committed
  7a8da27

• MAN: mistypes fixes

  Show description for 2d85f89
  alexey-tikhonov

  committed
  2d85f89

• pam_sss: add some missing cleanup calls.

  Show description for 2d408ed
  

  sumit-bose

  authored and

  alexey-tikhonov

  committed
  2d408ed

Commits on Nov 12, 2024

• subdomains: check when going online

  Show description for 8571d45
  

  sumit-bose

  authored and

  alexey-tikhonov

  committed
  8571d45

• tests: removing intg/ts_cache.py

  Show description for be0c232
  

  Dan Lavu

  authored and

  alexey-tikhonov

  committed
  be0c232

• tests: converting all the ldb cache tests to use one provider

  Show description for d5b6484
  

  Dan Lavu

  authored and

  alexey-tikhonov

  committed
  d5b6484

• Fix bug in objectclass_matched()

  Show description for 56438ec
  

  ondrejv2

  authored and

  alexey-tikhonov

  committed
  56438ec

Commits on Nov 14, 2024

• SPEC: require OpenSSL >= 1.0.1

  Show description for 71430f7
  alexey-tikhonov

  committed
  71430f7

• ssh: do not use default_domain_suffix

  Show description for ffec45b
  

  sumit-bose

  authored and

  alexey-tikhonov

  committed
  ffec45b

• responders: deprecate default_domain_suffix option

  Show description for fb91349
  

  sumit-bose

  authored and

  alexey-tikhonov

  committed
  fb91349

Commits on Nov 18, 2024

• OPTS: Add the option for DP_OPT_DYNDNS_REFRESH_OFFSET

  Show description for 9ee10f9
  

  aplopez

  authored and

  alexey-tikhonov

  committed
  9ee10f9

• TESTS: Also test default_dyndns_opts

  Show description for 2c72834
  

  aplopez

  authored and

  alexey-tikhonov

  committed
  2c72834

• SPEC: untie capabilities of different binaries

  Show description for b74fe65
  alexey-tikhonov

  committed
  b74fe65

• LDAP_CHILD: replace 'cap_dac_override' with 'cap_dac_read_search'

  Show description for 7ce14e7
  alexey-tikhonov

  committed
  7ce14e7

• LDAP_CHILD: don't require any capabilities besides 'cap_dac_read_search'

  Show description for 942799d
  alexey-tikhonov

  committed
  942799d

• LDAP_CHILD: require only 'cap_dac_read_search=permitted'

  Show description for 5ef1efc
  alexey-tikhonov

  committed
  5ef1efc

• Describe current capabilities usage.

  Show description for 23d9c93
  alexey-tikhonov

  committed
  23d9c93

Commits on Nov 19, 2024

• CLIENT: don't try to lookup getservbyport(0, ...)

  Show description for 507d2da
  alexey-tikhonov

  committed
  507d2da

• SSSDConfig: chown file to root:sssd

  Show description for 1f8040d
  alexey-tikhonov

  committed
  1f8040d

• Tests: Test transformation of bash-ldap-id-ldap-auth netgroup

  Show description for 9c4a51f
  

  aborah-sudo

  authored and

  alexey-tikhonov

  committed
  9c4a51f

• CI: COPR: add c10s buildroot

  Show description for 3294cdb
  alexey-tikhonov

  committed
  3294cdb

• 'dtrace' was moved to a separate package on C10S as well

  Show description for 21c6280
  alexey-tikhonov

  committed
  21c6280

Commits on Nov 21, 2024

• Tests: Reverse the condition and fail

  Show description for a926f43
  

  aborah-sudo

  authored and

  alexey-tikhonov

  committed
  a926f43

Commits on Nov 22, 2024

• ldap_child: make sure invalid krb5 context is not used

  Show description for fce94ae
  

  sumit-bose

  authored and

  alexey-tikhonov

  committed
  fce94ae

Commits on Nov 26, 2024

• Tests: Update sst to rhel-sst-idm-sssd for polarion.

  Show description for 7514309
  jakub-vavra-cz

  committed
  7514309

• analyzer: fix two crashes

  Show description for 0bb1364
  

  justin-stephenson

  authored and

  alexey-tikhonov

  committed
  0bb1364

Commits on Nov 27, 2024

• dyndns: collect nsupdate debug output

  Show description for e4b2604
  

  sumit-bose

  authored and

  pbrezina

  committed
  e4b2604

• tests: adding system/tests/readme.rst as a quick primer

  Show description for 58a2fee
  

  Dan Lavu

  authored and

  pbrezina

  committed
  58a2fee

Commits on Dec 2, 2024

• Tests: SSSD fails to store users if any of the requested attribute is empty

  Show description for 6040510
  

  aborah-sudo

  authored and

  jakub-vavra-cz

  committed
  6040510

• Tests: Add ssh to services for authentication with ssh tests.

  Show description for 0981054
  jakub-vavra-cz

  committed
  0981054

Commits on Dec 3, 2024

• Tests: Fix python black formation error

  Show description for 7b855ab
  

  aborah-sudo

  authored and

  alexey-tikhonov

  committed
  7b855ab

Commits on Dec 4, 2024

• Add DoT support for DNS updates

  Show description for fe26a93
  

  thalman

  authored and

  pbrezina

  committed
  fe26a93

Commits on Dec 5, 2024

• SYSDB: Store IPA trust type

  justin-stephenson

  committed
  1ca1b10

• Rename struct ipa_ad_server_ctx, and add id_ctx union member

  justin-stephenson

  committed
  cdb0fd6

• ipa: Make ipa_service_init() like ad_failover_init()

  Show description for ea85986
  justin-stephenson

  committed
  ea85986

• ad: Combine 1+2way trust options creation functions

  justin-stephenson

  committed
  caccfab

• ipa: Make ipa server subdomain functions generic

  Show description for cdad441
  justin-stephenson

  committed
  cdad441

• ipa: Add ipa subdomain provider initialization

  justin-stephenson

  committed
  87429d8

• ipa: Support ipa subdomain account info requests

  justin-stephenson

  committed
  03bb520

• ipa s2n: Remove check for SYSDB_UPN

  Show description for 1423d24
  justin-stephenson

  committed
  1423d24

• ipa: Rename ipa_create_ad_1way_trust_ctx()

  Show description for 104daa8
  justin-stephenson

  committed
  104daa8

• Handle missing SID for user private group

  Show description for 6c89f9e
  justin-stephenson

  committed
  6c89f9e

• Trust type Crash fix

  justin-stephenson

  committed
  816c4dd

• ipa s2n: Ignore trusted IPA user private group

  Show description for c1c31c0
  justin-stephenson

  committed
  c1c31c0

• AD: Remove unused AD_AT_TRUST_TYPE attribute

  justin-stephenson

  committed
  007f3f1