nss-idmap: use right group list pointer after sss_get_ex() If the initial array is too small it will be reallocated during sss_get_ex() and the pointer might change and the initial memory area should not be used anymore. Related to https://pagure.io/SSSD/sssd/issue/3715 Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>

nss-idmap: do not set a limit If the limit is set the needed size to return all groups cannot be returned. Related to https://pagure.io/SSSD/sssd/issue/3715 Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>

Fix minor spelling mistakes in sss_client/* Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>

nss-idmap: check timed muted return code Check return values and make sure the mutex is released in case of errors. Related to https://pagure.io/SSSD/sssd/issue/2478 Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>

nss-idmap: allow NULL result in *_timeout calls To make the *_timeout calls more resilient checks are added if the result parameter is NULL. It will not be used in this case. Related to https://pagure.io/SSSD/sssd/issue/2478 Reviewed-by: Fabiano Fidêncio <fidencio@redhat.com> Reviewed-by: Alexander Bokovoy <abokovoy@redhat.com>

nss-idmap: allow empty buffer with SSS_NSS_EX_FLAG_INVALIDATE_CACHE Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>

NSS: add support for SSS_NSS_EX_FLAG_INVALIDATE_CACHE The patch adds support for the SSS_NSS_EX_FLAG_INVALIDATE_CACHE flag and makes the existing code more flexible and handle additional flags. If SSS_NSS_EX_FLAG_INVALIDATE_CACHE is set the requested object is only looked up in the cache and if it was found on-disk and memory cache entries will be invalidated. Related to https://pagure.io/SSSD/sssd/issue/2478 Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>

NSS: add support for SSS_NSS_EX_FLAG_NO_CACHE If SSS_NSS_EX_FLAG_NO_CACHE is set the object is refresh by directly looking it up in the backend. Related to https://pagure.io/SSSD/sssd/issue/2478 Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>

NSS: add *_EX version of some requests To be able to send the flags to the SSSD responder new request types with an _EX postfix are added which expect and additional 32bit flag field after the name or the id of the requested object. Related to https://pagure.io/SSSD/sssd/issue/2478 Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>

nss-idmap: add nss like calls with timeout and flags This patch adds new calls to libsss_nss_idmap to get NSS like user and group information directly from SSSD without using the system's NSS interfaces. Additionally a timeout and a flags options are added which are not available for system's NSS. Related to https://pagure.io/SSSD/sssd/issue/2478 Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>