Patch 0001: Refactor the negative cache
Rename functions from nss_ncache_* to sss_ncache_*
Move negative cache to responder/common and rename as negcache.c/h
Patch 0002: Move setup of filter_users and filter_groups to negcache.c
Creates a new function - sss_ncache_prepopulate() - that can be
shared with other responders, such as PAM.
Patch 0003: Honor filter_users in PAM.
Previously, while the user was filtered out of NSS, we were still trying
to authenticate against the user in PAM.
See
https://bugzilla.redhat.com/show_bug.cgi?id=596295 for more details.
(Tested and verified that these patches fix that issue)
Differences from the version submitted to the master branch:
Patch 0001: Not needed in sssd-1-2. There was a regression in the master
branch that this patch fixed.
Patch 0002: Rewritten, because the merge was overly-complicated. (Most
of this patch is just a s/nss_ncache/sss_ncache/g
Patch 0003: Applied cleanly
Patch 0004: Trivial merge was clean.
--
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/