a6eb9c4c3ff68d134bc745e8374f182737e9696b |
|
06-Dec-2017 |
Jakub Hrozek <jhrozek@redhat.com> |
CACHE_REQ: Implement the plugin methods that utilize the domain locator API
Mainly, this patch adds handlers for the dp_get_domain_check_fn(),
dp_get_domain_send_fn() and dp_get_domain_recv_fn() functions to
requests that resolve objects by ID.
This patch also adds domain-local negcache setter for by-id methods
Previously, the by-ID methods only used global negative cache setters
because the ID space is global and we always iterated over all domains.
However, with addition of the domain locator plugin, we want also
to skip only certain domains and the easiest way to to so is to add
the IDs for domains that do not contain these IDs to the negative cache
with the get-account-domain request.
Therefore this patch also adds per-domain negative cache setters for
the three plugins that search by ID.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com> |
a02a5ed51178b2cbede0396d66aed716b8898096 |
|
25-Oct-2017 |
René Genz <liebundartig@freenet.de> |
Fix minor spelling mistakes
Merges: https://pagure.io/SSSD/sssd/pull-request/3556
Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com> |
66c8e92eb5a4985bb7f64c349a53b08030a000cf |
|
29-Mar-2017 |
Fabiano Fidêncio <fidencio@redhat.com> |
CACHE_REQ: Make use of domainResolutionOrder
domainResolutionOrder has been introduced in the previous commits and
allows the admin to set up a specific order which the domains will be
resolved during a lookup and with this patch we can take advantage of
this.
In order to have it working a new structure has been added
(struct domain_resolution_order) to the responder context and will be
used by the cache_req to perform the lookups based on this list.
As the ipaDomainResolutionOrder may be set globally on IPA or per View,
SSSD does respect the following precedence order: View > Globally.
The way the list is built is quite simple, basically having the domains
present on ipaDomainResolutionOrder as the first domains (in that
specific order) and then appending the remaining domains to this list.
The final result is a completely flat list with all the domains
respecting the specified order (it's important to remember that the
domains not specified won't follow any specific order, they're just
"random" based on the domains list present in the responder context.
Related:
https://pagure.io/SSSD/sssd/issue/3001
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com> |
53c31b83e4d06ea4c2813eec2f1e647a613b4a2b |
|
08-Feb-2017 |
Pavel Březina <pbrezina@redhat.com> |
cache_req: add host by name search
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> |
4df7aec645f87342f3a5146062abcb15f71f4fd9 |
|
08-Feb-2017 |
Pavel Březina <pbrezina@redhat.com> |
cache_req: move dp request to plugin
This will allow to use cache req even for object that do not use
account request such as hosts.
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> |
2b5704cd96a085b99d3b0d4f80f4414adc134750 |
|
08-Feb-2017 |
Pavel Březina <pbrezina@redhat.com> |
sss_parse_inp_send: provide default_domain as parameter
It is not always desirable to consider default_domain from configuration
but expect none instead. For example when we search host certificates.
This is currently not used in this patch since host lookups parse
name directly with sss_parse_name but it will be used in the next
patch.
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> |
28ebfa4373d1e7ce45b5d70a3619df1c074a661e |
|
08-Oct-2015 |
Pavel Březina <pbrezina@redhat.com> |
cache_req: add support for UPN
Reviewed-by: Sumit Bose <sbose@redhat.com> |
b1bea7c3d202eb3b53e219c9ccb83161ce47ca6a |
|
14-Jul-2015 |
Sumit Bose <sbose@redhat.com> |
test common: sss_dp_get_account_recv() fix assignment
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> |
7caf7ed4f2eae1ec1c0717b4ee6ce78bdacd5926 |
|
22-Apr-2014 |
Jakub Hrozek <jhrozek@redhat.com> |
RESPONDERS: Add a new request sss_parse_inp_send
The responders were copying code to parse input and on encountering an
uknown domain, send the discover subdomain request. This patch adds a
reusable request that can always be called in responders and in case the
name can be parsed, just shortcut.
Reviewed-by: Pavel Březina <pbrezina@redhat.com> |
c440c424443517b12afa8d56f989d92ca6ba56a3 |
|
22-Apr-2014 |
Jakub Hrozek <jhrozek@redhat.com> |
TESTS: Split a separate common_mock_resp_dp module
Splitting the module would allow responders that test the Data Provider
requests to use the mock_rctx/mock_cctx functions without duplicate
definitions.
Reviewed-by: Pavel Březina <pbrezina@redhat.com> |