Implemented LDAP component of GPO-based access control Reviewed-by: Sumit Bose <sbose@redhat.com> Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>

SSSD: Improved domain detection A bit more elegant way of detection of what domain the group member belongs to Resolves: https://fedorahosted.org/sssd/ticket/2132

add sss_ldap_encode_ndr_uint32 Converts uint32 to a string value that is suitable for octed string attributes.

Use common error facility instead of sdap_result Simplifies and consolidates error reporting for ldap authentication paths. Adds 3 new error codes: ERR_CHPASS_DENIED - Used when password constraints deny password changes ERR_ACCOUNT_EXPIRED - Account is expired ERR_PASSWORD_EXPIRED - Password is expired

Simple implementation of Netscape password warning expiration control

Added sss_ldap_dn_in_search_bases()

sss_ldap_err2string() - function created https://fedorahosted.org/sssd/ticket/986

Handle timeout during sss_ldap_init_send In some cases, where there would be no response from the LDAP server, there would be no R/W events on the LDAP fd, so sdap_async_sys_connect_done would never be called. This patch adds a tevent timer that cancels the connection after SDAP_NETWORK_TIMEOUT seconds.

Move IP adress escaping from the LDAP namespace

Use ldap_init_fd() instead of ldap_initialize() if available

Add a utility function to escape IPv6 address for use in URIs

Add support for Attribute Scoped Queries For more details on ASQ, see: http://msdn.microsoft.com/en-us/library/aa366976%28VS.85%29.aspx http://msdn.microsoft.com/en-us/library/aa746418%28v=VS.85%29.aspx

Don't pass NULL to printf for TLS errors https://fedorahosted.org/sssd/ticket/643

Rename server/ directory to src/ Also update BUILD.txt