.gitignore

file added

+1

.sssd.metadata

file added

+1

README.md

file removed

-5

SOURCES/0001-MAN-Mention-sssd-secrets-in-SEE-ALSO-section.patch

file added

+36

SOURCES/0002-split_on_separator-move-to-a-separate-file.patch

file added

+369

SOURCES/0003-util-move-string_in_list-to-util_ext.patch

file added

+91

SOURCES/0004-certmap-add-new-library-libsss_certmap.patch

file added

+5787

SOURCES/0005-certmap-add-placeholder-for-OpenSSL-implementation.patch

file added

+151

SOURCES/0006-sysdb-add-sysdb_attrs_copy.patch

file added

+173

SOURCES/0007-sdap_get_users_send-new-argument-mapped_attrs.patch

file added

+316

SOURCES/0008-LDAP-always-store-the-certificate-from-the-request.patch

file added

+178

SOURCES/0009-sss_cert_derb64_to_ldap_filter-add-sss_certmap-suppo.patch

file added

+235

SOURCES/0010-sysdb-add-certmap-related-calls.patch

file added

+846

SOURCES/0011-IPA-add-certmap-support.patch

file added

+484

SOURCES/0012-nss-idmap-add-sss_nss_getlistbycert.patch

file added

+736

SOURCES/0013-nss-allow-larger-buffer-for-certificate-based-reques.patch

file added

+70

SOURCES/0014-IPA-Add-s2n-request-to-string-function.patch

file added

+44

SOURCES/0015-IPA-Enhance-debug-logging-for-ipa-s2n-operations.patch

file added

+82

SOURCES/0016-UTIL-iobuf-Make-input-parameter-for-the-readonly-ope.patch

file added

+45

SOURCES/0017-UTIL-Fix-a-typo-in-the-tcurl-test-tool.patch

file added

+32

SOURCES/0018-UTIL-Add-SAFEALIGN_COPY_UINT8_CHECK.patch

file added

+36

SOURCES/0019-UTIL-Add-utility-macro-cli_creds_get_gid.patch

file added

+34

SOURCES/0020-UTIL-Add-type-specific-getsetters-to-sss_iobuf.patch

file added

+194

SOURCES/0021-UTIL-krb5-principal-un-marshalling.patch

file added

+262

SOURCES/0022-KCM-Initial-responder-build-and-packaging.patch

file added

+1013

SOURCES/0023-KCM-request-parsing-and-sending-a-reply.patch

file added

+578

SOURCES/0024-KCM-Implement-an-internal-ccache-storage-and-retriev.patch

file added

+2153

SOURCES/0025-KCM-Add-a-in-memory-credential-storage.patch

file added

+907

SOURCES/0026-KCM-Implement-KCM-server-operations.patch

file added

+2326

SOURCES/0027-MAN-Add-a-manual-page-for-sssd-kcm.patch

file added

+278

SOURCES/0028-TESTS-Add-integration-tests-for-the-KCM-responder.patch

file added

+799

SOURCES/0029-SECRETS-Create-DB-path-before-the-operation-itself.patch

file added

+405

SOURCES/0030-SECRETS-Return-a-nicer-error-message-on-request-with.patch

file added

+40

SOURCES/0031-SECRETS-Store-ccaches-in-secrets-for-the-KCM-respond.patch

file added

+206

SOURCES/0032-TCURL-Support-HTTP-POST-for-creating-containers.patch

file added

+129

SOURCES/0033-KCM-Store-ccaches-in-secrets.patch

file added

+3787

SOURCES/0034-KCM-Make-the-secrets-ccache-back-end-configurable-ma.patch

file added

+219

SOURCES/0035-KCM-Queue-requests-by-the-same-UID.patch

file added

+909

SOURCES/0036-KCM-Idle-terminate-the-responder-if-the-secrets-back.patch

file added

+55

SOURCES/0037-CONFIGURE-Fix-fallback-if-pkg-config-for-uuid-is-mis.patch

file added

+30

SOURCES/0038-intg-fix-configure-failure-with-strict-cflags.patch

file added

+52

SOURCES/0039-intg-Remove-bashism-from-intgcheck-prepare.patch

file added

+54

SOURCES/0040-UTIL-Introduce-subdomain_create_conf_path.patch

file added

+127

SOURCES/0041-SUBDOMAINS-Allow-use_fully_qualified_names-for-subdo.patch

file added

+531

SOURCES/0042-CACHE_REQ-Descend-into-subdomains-on-lookups.patch

file added

+172

SOURCES/0043-NSS-TESTS-Fix-subdomains-attribution.patch

file added

+35

SOURCES/0044-NSS-TESTS-Improve-setup-teardown-for-subdomains-test.patch

file added

+274

SOURCES/0045-NSS-TESTS-Include-searches-for-non-fqnames-members-o.patch

file added

+355

SOURCES/0046-SYSDB-Add-methods-to-deal-with-the-domain-s-resoluti.patch

file added

+289

SOURCES/0047-SYSDB-TESTS-Add-tests-for-the-domain-s-resolution-or.patch

file added

+259

SOURCES/0048-IPA-Get-ipaDomainsResolutionOrder-from-ipaConfig.patch

file added

+369

SOURCES/0049-IPA_SUBDOMAINS-Rename-_refresh_view-to-_refresh_view.patch

file added

+54

SOURCES/0050-IPA-Get-ipaDomainsResolutionOrder-from-IPA-ID-View.patch

file added

+347

SOURCES/0051-DLINKLIST-Add-DLIST_FOR_EACH_SAFE-macro.patch

file added

+37

SOURCES/0052-CACHE_REQ-Make-use-of-domainResolutionOrder.patch

file added

+795

SOURCES/0053-UTIL-Expose-replace_char-as-sss_replace_char.patch

file added

+81

SOURCES/0054-Add-domain_resolution_order-config-option.patch

file added

+205

SOURCES/0055-ssh-handle-binary-keys-correctly.patch

file added

+48

SOURCES/0056-ssh-add-support-for-certificates-from-non-default-vi.patch

file added

+52

SOURCES/0057-krb5-return-to-responder-that-pkinit-is-not-availabl.patch

file added

+60

SOURCES/0058-IPA-add-mapped-attributes-to-user-from-trusted-domai.patch

file added

+153

SOURCES/0059-IPA-lookup-AD-users-by-certificates-on-IPA-clients.patch

file added

+209

SOURCES/0060-IPA-enable-AD-user-lookup-by-certificate.patch

file added

+30

SOURCES/0061-CONFDB-Introduce-SSSD-domain-type-to-distinguish-POS.patch

file added

+242

SOURCES/0062-CONFDB-Allow-configuring-application-sections-as-non.patch

file added

+531

SOURCES/0063-CACHE_REQ-Domain-type-selection-in-cache_req.patch

file added

+976

SOURCES/0064-IFP-Search-both-POSIX-and-non-POSIX-domains.patch

file added

+705

SOURCES/0065-IFP-ListByName-Don-t-crash-when-no-results-are-found.patch

file added

+57

SOURCES/0066-PAM-Remove-unneeded-memory-context.patch

file added

+58

SOURCES/0067-PAM-Add-application-services.patch

file added

+452

SOURCES/0068-SYSDB-Allow-storing-non-POSIX-users.patch

file added

+152

SOURCES/0069-SYSDB-Only-generate-new-UID-in-local-domain.patch

file added

+36

SOURCES/0070-LDAP-save-non-POSIX-users-in-application-domains.patch

file added

+141

SOURCES/0071-LDAP-Relax-search-filters-in-application-domains.patch

file added

+254

SOURCES/0072-KRB5-Authenticate-users-in-a-non-POSIX-domain-using-.patch

file added

+353

SOURCES/0073-KCM-Fix-off-by-one-error-in-secrets-key-parsing.patch

file added

+211

SOURCES/0074-tcurl-add-support-for-ssl-and-raw-output.patch

file added

+1478

SOURCES/0075-tcurl-test-refactor-so-new-options-can-be-added-more.patch

file added

+438

SOURCES/0076-tcurl-test-add-support-for-raw-output.patch

file added

+49

SOURCES/0077-tcurl-test-add-support-for-tls-settings.patch

file added

+62

SOURCES/0078-tcurl-add-support-for-http-basic-auth.patch

file added

+112

SOURCES/0079-tcurl-test-allow-to-set-custom-headers.patch

file added

+63

SOURCES/0080-tcurl-test-add-support-for-client-certificate.patch

file added

+53

SOURCES/0081-ci-do-not-build-secrets-on-rhel6.patch

file added

+115

SOURCES/0082-build-make-curl-required-by-secrets.patch

file added

+65

SOURCES/0083-secrets-use-tcurl-in-proxy-provider.patch

file added

+459

SOURCES/0084-secrets-remove-http-parser-code-in-proxy-provider.patch

file added

+612

SOURCES/0085-secrets-allow-to-configure-certificate-check.patch

file added

+254

SOURCES/0086-secrets-support-HTTP-basic-authentication-with-proxy.patch

file added

+39

SOURCES/0087-secrets-fix-debug-message.patch

file added

+29

SOURCES/0088-secrets-always-add-Content-Length-header.patch

file added

+112

SOURCES/0089-sss_iobuf-fix-read-shadows-a-global-declaration.patch

file added

+40

SOURCES/0090-configure-fix-typo.patch

file added

+29

SOURCES/0091-pam_test_client-add-service-and-environment-to-PAM-t.patch

file added

+105

SOURCES/0092-pam_test_client-add-SSSD-getpwnam-lookup.patch

file added

+142

SOURCES/0093-sss_sifp-update-method-names.patch

file added

+54

SOURCES/0094-pam_test_client-add-InfoPipe-user-lookup.patch

file added

+131

SOURCES/0095-sssctl-integrate-pam_test_client-into-sssctl.patch

file added

+359

SOURCES/0096-i18n-adding-sssctl-files.patch

file added

+34

SOURCES/0097-responders-do-not-leak-selinux-context-on-clients-de.patch

file added

+69

SOURCES/0098-ipa_s2n_get_acct_info_send-provide-correct-req_input.patch

file added

+89

SOURCES/0099-config-check-Message-when-sssd.conf-is-missing.patch

file added

+39

SOURCES/0100-sbus-check-connection-for-NULL-before-unregister-it.patch

file added

+44

SOURCES/0101-selinux-Do-not-fail-if-SELinux-is-not-managed.patch

file added

+211

SOURCES/0102-UTIL-Use-max-15-characters-for-AD-host-UPN.patch

file added

+49

SOURCES/0103-Move-sized_output_name-and-sized_domain_name-into-re.patch

file added

+300

SOURCES/0104-IFP-Use-sized_domain_name-to-format-the-groups-the-u.patch

file added

+95

SOURCES/0105-RESPONDER-Fallback-to-global-domain-resolution-order.patch

file added

+313

SOURCES/0106-NSS-TESTS-Improve-non-fqnames-tests.patch

file added

+164

SOURCES/0107-CACHE_REQ-Allow-configurationless-shortname-lookups.patch

file added

+139

SOURCES/0108-CACHE_REQ_DOMAIN-Add-some-comments-to-cache_req_doma.patch

file added

+42

SOURCES/0109-RESPONDER_COMMON-Improve-domaiN_resolution_order-deb.patch

file added

+54

SOURCES/0110-CACHE_REQ_DOMAIN-debug-the-set-domain-resolution-ord.patch

file added

+50

SOURCES/0111-SECRETS-remove-unused-variable.patch

file added

+33

SOURCES/0112-IPA-Improve-DEBUG-message-if-a-group-has-no-ipaNTSec.patch

file added

+42

SOURCES/0113-IPA-Improve-s2n-debug-message-for-missing-ipaNTSecur.patch

file added

+45

SOURCES/0114-CONFDB-Fix-standalone-application-domains.patch

file added

+128

SOURCES/0115-utils-add-sss_domain_is_forest_root.patch

file added

+48

SOURCES/0116-ad-handle-forest-root-not-listed-in-ad_enabled_domai.patch

file added

+104

SOURCES/0117-SDAP-Fix-handling-of-search-bases.patch

file added

+168

SOURCES/0118-overrides-add-certificates-to-mapped-attribute.patch

file added

+102

SOURCES/0119-AD-Make-ad_account_can_shortcut-reusable-by-SSSD-on-.patch

file added

+243

SOURCES/0120-LDAP-AD-Do-not-fail-in-case-rfc2307bis_nested_groups.patch

file added

+47

SOURCES/0121-PAM-check-matching-certificates-from-all-domains.patch

file added

+116

SOURCES/0122-DP-Reduce-Data-Provider-log-level-noise.patch

file added

+80

SOURCES/0123-NSS-Move-output-name-formatting-to-utils.patch

file added

+249

SOURCES/0124-CACHE_REQ-Add-a-new-cache_req_ncache_filter_fn-plugi.patch

file added

+322

SOURCES/0125-CACHE_REQ_RESULT-Introduce-cache_req_create_ldb_resu.patch

file added

+92

SOURCES/0126-CACHE_REQ-Make-use-of-cache_req_ncache_filter_fn.patch

file added

+392

SOURCES/0127-SERVER_MODE-Update-sdap-lists-for-each-ad_ctx.patch

file added

+81

SOURCES/0128-sss_nss_getlistbycert-return-results-from-multiple-d.patch

file added

+348

SOURCES/0129-CACHE_REQ-Avoid-using-of-uninitialized-value.patch

file added

+68

SOURCES/0130-CACHE_REQ-Ensure-the-domains-are-updated-for-filter-.patch

file added

+163

SOURCES/0131-AD-SUBDOMAINS-Fix-search-bases-for-child-domains.patch

file added

+102

SOURCES/0132-KRB5-Advise-the-user-to-inspect-the-krb5_child.log-i.patch

file added

+39

SOURCES/0133-cache_req-use-the-right-negative-cache-for-initgroup.patch

file added

+40

SOURCES/0134-test-make-sure-p11_child-is-build-for-pam-srv-tests.patch

file added

+31

SOURCES/0135-pam-properly-support-UPN-logon-names.patch

file added

+163

SOURCES/0136-KCM-Fix-the-per-client-serialization-queue.patch

file added

+334

SOURCES/0137-TESTS-Add-a-test-for-parallel-execution-of-klist.patch

file added

+79

SOURCES/0138-ipa-filter-IPA-users-from-extdom-lookups-by-certific.patch

file added

+115

SOURCES/0139-krb5-accept-changed-principal-if-krb5_canonicalize-T.patch

file added

+50

SOURCES/0140-IPA-Avoid-using-uninitialized-ret-value-when-skippin.patch

file added

+30

SOURCES/0141-IPA-Return-from-function-after-marking-a-request-as-.patch

file added

+30

SOURCES/0142-HBAC-Do-not-rely-on-originalMemberOf-use-the-sysdb-m.patch

file added

+175

SOURCES/0143-VALIDATORS-Add-subdomain-section.patch

file added

+53

SOURCES/0144-VALIDATORS-Remove-application-section-domain.patch

file added

+48

SOURCES/0145-VALIDATORS-Escape-special-regex-chars.patch

file added

+35

SOURCES/0146-TESTS-Add-unit-tests-for-cfg-validation.patch

file added

+328

SOURCES/0147-MAN-Fix-typo-in-trusted-domain-section.patch

file added

+29

SOURCES/0148-VALIDATORS-Change-regex-for-app-domains.patch

file added

+36

SOURCES/0149-VALIDATORS-Detect-inherit_from-in-normal-domain.patch

file added

+154

SOURCES/0150-VALIDATOR-prevent-duplicite-report-from-subdomain-se.patch

file added

+36

SOURCES/0151-test_config_check-Fix-few-issues.patch

file added

+92

SOURCES/0152-KRB5-Fix-access_provider-krb5.patch

file added

+81

SOURCES/0153-BUILD-Improve-error-messages-for-optional-dependenci.patch

file added

+86

SOURCES/0154-RESPONDER_COMMON-update-certmaps-in-responders.patch

file added

+77

SOURCES/0155-tests-fix-test_pam_preauth_cert_no_logon_name.patch

file added

+43

SOURCES/0156-pam_sss-add-support-for-SSS_PAM_CERT_INFO_WITH_HINT.patch

file added

+258

SOURCES/0157-add_pam_cert_response-add-support-for-SSS_PAM_CERT_I.patch

file added

+104

SOURCES/0158-PAM-send-user-name-hint-response-when-needed.patch

file added

+335

SOURCES/0159-sysdb-sysdb_get_certmap-allow-empty-certmap.patch

file added

+105

SOURCES/0160-sssctl-show-user-name-used-for-authentication-in-use.patch

file added

+53

SOURCES/0161-RESP-Provide-a-reusable-request-to-fully-resolve-inc.patch

file added

+267

SOURCES/0162-IFP-Only-format-the-output-name-to-the-short-version.patch

file added

+121

SOURCES/0163-IFP-Resolve-group-names-from-GIDs-if-required.patch

file added

+204

SOURCES/0164-ldap-handle-certmap-errors-gracefully.patch

file added

+56

SOURCES/0165-SECRETS-Fix-warning-Wpointer-bool-conversion.patch

file added

+53

SOURCES/0166-IPA-Fix-the-PAM-error-code-that-auth-code-expects-to.patch

file added

+50

SOURCES/0167-pam_sss-Fix-checking-of-empty-string-cert_user.patch

file added

+52

SOURCES/0168-CACHE_REQ-Simplify-_search_ncache_filter.patch

file added

+124

SOURCES/0169-CACHE_REQ_SEARCH-Check-for-filtered-users-groups-als.patch

file added

+61

SOURCES/0170-cache_req-Do-not-use-default_domain_suffix-with-netg.patch

file added

+34

SOURCES/0171-krb5-disable-enterprise-principals-during-password-c.patch

file added

+47

SOURCES/0172-pam_sss-Fix-leaking-of-memory-in-case-of-failures.patch

file added

+44

SOURCES/0173-IFP-Add-domain-and-domainname-attributes-to-the-user.patch

file added

+372

SOURCES/0174-IFP-Fix-error-handling-in-ifp_user_get_attr_handle_r.patch

file added

+39

SOURCES/0175-SYSDB-Return-ERR_NO_TS-when-there-s-no-timestamp-cac.patch

file added

+76

SOURCES/0176-SYSDB-Internally-expose-sysdb_search_ts_matches.patch

file added

+90

SOURCES/0177-SYSDB-Make-the-usage-of-the-filter-more-generic-for-.patch

file added

+157

SOURCES/0178-SYSDB_OPS-Mark-an-entry-as-expired-also-in-the-times.patch

file added

+55

SOURCES/0179-SYSDB_OPS-Invalidate-a-cache-entry-also-in-the-ts_ca.patch

file added

+49

SOURCES/0180-SYSDB-Introduce-_search_-users-groups-_by_timestamp.patch

file added

+278

SOURCES/0181-LDAP_ID_CLEANUP-Use-sysdb_search_-_by_timestamp.patch

file added

+48

SOURCES/0182-krb5-use-plain-principal-if-password-is-expired.patch

file added

+66

SOURCES/0183-RESPONDER-Use-fqnames-as-output-when-needed.patch

file added

+279

SOURCES/0184-DOMAIN-Add-sss_domain_info_-get-set-_output_fqnames.patch

file added

+128

SOURCES/0185-GPO-Fix-typo-in-DEBUG-message.patch

file added

+27

SOURCES/0186-SDAP-Update-parent-sdap_list.patch

file added

+97

SOURCES/0187-RESPONDERS-Fix-terminating-idle-connections.patch

file added

+84

SOURCES/0188-TESTS-Integration-test-for-idle-timeout.patch

file added

+135

SOURCES/0189-MAN-Document-that-client_idle_timeout-can-t-be-short.patch

file added

+36

SOURCES/0190-ad_account_can_shortcut-shortcut-if-ID-is-unknown.patch

file added

+38

SOURCES/0191-sudo-add-a-threshold-option-to-reduce-size-of-rules-.patch

file added

+211

SOURCES/0192-libwbclient-Change-return-code-for-wbcAuthenticateUs.patch

file added

+57

SOURCES/0193-IPA-fix-handling-of-certmap_ctx.patch

file added

+666

SOURCES/0194-certmap-make-sure-eku_oid_list-is-always-allocated.patch

file added

+95

SOURCES/0195-cache_req-Look-for-name-attribute-also-in-nss_cmd_ge.patch

file added

+62

SOURCES/0196-sssd_client-add-mutex-protected-call-to-the-PAC-resp.patch

file added

+461

SOURCES/0197-sysdb-sanitize-search-filter-input.patch

file added

+140

SOURCES/0198-ipa-make-sure-view-name-is-initialized-at-startup.patch

file added

+60

SOURCES/0199-CACHE_REQ-Copy-the-cr_domain-list-for-each-request.patch

file added

+142

SOURCES/0999-NOUPSTREAM-Default-to-root-if-sssd-user-is-not-spec

file added

+26

SPECS/sssd.spec

file added

+3805