SSH: Use a qualified name for user searches in the SSH responder The name is converted from whatever we receive on input to the internal format before processing the data further. Reviewed-by: Sumit Bose <sbose@redhat.com>

ssh: generate public keys from certificate Resolves: https://fedorahosted.org/sssd/ticket/2711 Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>

SSH: Fix parsing of names from client requests Try to parse names in the form user@domain first, as that's what sss_ssh_* send in requests when the --domain option is used. Do not parse host names using domain-specific regular expression.

RESPONDERS: Create a common file with service names and versions The monitor sends calls different sbus methods to different responders. Instead of including headers of the particular responders directly in monitor, which breaks layering a little, create a common header file that will be included from src/responder/common/

SSH: Expire hosts in known_hosts

SSH: Refactor sysdb and related code

SSH: Add dp_get_host_send to common responder code Instead of using account_info request, creates a new ssh specific request. This improves code readability and will make the code more flexible in the future. https://fedorahosted.org/sssd/ticket/1176

SSH: Add support for hashed known_hosts https://fedorahosted.org/sssd/ticket/1203

SSH: Allow clients to explicitly specify host alias This change removes the need to canonicalize host names on the responder side - the relevant code was removed.

SSH: Replace blocking getaddrinfo call in the responder with asynchronous resolver code

SSH: Manage global known_hosts file in the responder https://fedorahosted.org/sssd/ticket/1193

SSH: Save SSH host name aliases

SSH: Responder