TESTING only#8596

Closed

justin-stephenson wants to merge 83 commits into

SSSD:masterfrom

justin-stephenson:failover_justin_port_ldap_and_ad

Commits on Apr 13, 2026

DO NOT PUSH TO MASTER minimal: Initial implementation of minimal provider

justin-stephenson
authored and
pbrezina
committed
DO NOT PUSH TO MASTER minimal: copy paste services code
pbrezina
committed
DO NOT PUSH TO MASTER minimal: push init_ctx instead of id_ctx so we can easily pass new fctx
pbrezina
committed
DO NOT PUSH TO MASTER minimal: add authentication provider

justin-stephenson
authored and
pbrezina
committed
DO NOT PUSH TO MASTER minimal: copy paste authentication code
pbrezina
committed
DO NOT PUSH TO MASTER minimal: switch to new failover for service lookup and user
pbrezina
committed
DO NOT PUSH TO MASTER minimal: update how to use it notes
pbrezina
committed
DO NOT PUSH TO MASTER minimal: add sssd-minimal provider package to spec file

pbrezina
and
claude
committed
DO NOT PUSH TO MASTER ci: enable failover branch
pbrezina
committed
failover: implement new failover interface
pbrezina
committed

Commits on May 4, 2026

contrib: removed unused test-suite

pbrezina
authored and
justin-stephenson
committed
dist: clean up and fix ditribution tarball

pbrezina
authored and
justin-stephenson
committed
KCM: fix use-after-free in `kcm_read_options()`

alexey-tikhonov
authored and
justin-stephenson
committed
krb5: make sure keytab is a FILE before checking for access

Paymon MARANDI
authored and
justin-stephenson
committed
conf: add avoid_by_id_lookups domain option

sumit-bose
authored and
justin-stephenson
committed
cache_req: switch from ID to name lookup

sumit-bose
authored and
justin-stephenson
committed
idp: do not update cache timeout if member is added

sumit-bose
authored and
justin-stephenson
committed
scripts: add fixed-issues.sh script

authored and
justin-stephenson
committed
scripts: add generate-release-notes.py script

authored and
justin-stephenson
committed
scripts: add generate-full-release-notes.sh script

pbrezina
authored and
justin-stephenson
committed
ci: automatically generate release notes

pbrezina
authored and
justin-stephenson
committed
More trivial spelling/grammatical fixes. No functional code was harmed in the changing of these files.

striker314
authored and
justin-stephenson
committed
config: add missing rules for idp options

eisenmann-b1
authored and
justin-stephenson
committed
oidc_child: get refresh_token for later

eisenmann-b1
authored and
justin-stephenson
committed
oidc_child: store tokens in cache

eisenmann-b1
authored and
justin-stephenson
committed
oidc_child: add --refresh-access-token flag

eisenmann-b1
authored and
justin-stephenson
committed
idp: automatically refresh tokens

eisenmann-b1
authored and
justin-stephenson
committed
idp: add option to automatically refresh tokens

eisenmann-b1
authored and
justin-stephenson
committed
idp: delete non-replaced tokens from cache

eisenmann-b1
authored and
justin-stephenson
committed
idp: construct pam_data with timer

eisenmann-b1
authored and
justin-stephenson
committed
oidc_child: url-encode post data items

eisenmann-b1
authored and
justin-stephenson
committed
oidc_child: free json objects properly

eisenmann-b1
authored and
justin-stephenson
committed
oidc_child: add macros for token names

eisenmann-b1
authored and
justin-stephenson
committed
idp: pass sss_domain_info to create_refresh_token_timer

eisenmann-b1
authored and
justin-stephenson
committed
idp: fix idp_id_scope Entra example

eisenmann-b1
authored and
justin-stephenson
committed
oidc_child: initialize curl only once

eisenmann-b1
authored and
justin-stephenson
committed
fix typos

eisenmann-b1
authored and
justin-stephenson
committed
fix gcc warning

eisenmann-b1
authored and
justin-stephenson
committed
add config option to enable logging sensitive data

eisenmann-b1
authored and
justin-stephenson
committed
Add missing include

alexey-tikhonov
authored and
justin-stephenson
committed
tests: port LDAP+Kerberos tests to pytest

madhuriupadhye
authored and
justin-stephenson
committed
ad: move ad_get_sids_from_pac() to ad_pac_common.c

sumit-bose
authored and
justin-stephenson
committed
pam: add pam_gssapi_indicators_apply option

sumit-bose
authored and
justin-stephenson
committed
pam: apply SIDs from PAC to authentication indicators

sumit-bose
authored and
justin-stephenson
committed
pam: fix out-of-bounds read in pam_passkey_child_read_data

xuraoqing
authored and
justin-stephenson
committed
removing unstable topologies from memecache tests

Dan Lavu
authored and
justin-stephenson
committed
oidc_child: add new option return-tokens

sumit-bose
authored and
justin-stephenson
committed
dp_target_id.c: Fix typo "lenght" -> "length"

arrowd
authored and
justin-stephenson
committed
pam: gate PAC indicator code on BUILD_SAMBA

padelsbach
authored and
justin-stephenson
committed
PAM/PASSKEY: avoid unnecessary memcpy

alexey-tikhonov
authored and
justin-stephenson
committed
po: update translations

weblate
authored and
justin-stephenson
committed
IPA: memory leak fixed

alexey-tikhonov
authored and
justin-stephenson
committed
krb5: restart krb5_child for Smartcard authentication

sumit-bose
authored and
justin-stephenson
committed
po: update translations

weblate
authored and
justin-stephenson
committed
scripts: fix release notes generation

pbrezina
authored and
justin-stephenson
committed
release: install jq as needed dependency

pbrezina
authored and
justin-stephenson
committed
tests: mark KCM TGT renewal test as flaky

madhuriupadhye
authored and
justin-stephenson
committed
Tests: LDAP+KRB5 krb_misc tests

madhuriupadhye
authored and
justin-stephenson
committed
tests: poll for KCM TGT renewal instead of fixed sleep

madhuriupadhye
authored and
justin-stephenson
committed
tests: implement multi-token support for smart card authentication

krishnavema
authored and
justin-stephenson
committed
utils: add TEVENT_REQ_ERROR_TO_ERRNO

pbrezina
authored and
justin-stephenson
committed
failover: implement new failover interface

pbrezina
authored and
justin-stephenson
committed
failover: minor header fixes
justin-stephenson
committed
dp: Remove sdap_ret and sdap_error
justin-stephenson
committed
ldap: Replace EIO/ETIMEDOUT with ERR_SERVER_FAILURE
justin-stephenson
committed
dp: Reduce sssd.dataprovider methods to single return code
justin-stephenson
committed
Update LDAP provider initialization for new failover
justin-stephenson
committed
Port LDAP provider code to new failover
justin-stephenson
committed
ldap: Remove sdap_online_check.c
justin-stephenson
committed
minimal: Disable building minimal provider
justin-stephenson
committed
ci: Exclude IPA tests
justin-stephenson
committed
tests: Exclude certain tests temporarily
justin-stephenson
committed
DONOTMERGE: Disable building IPA provider
justin-stephenson
committed
ldap: Remove sdap_id_op.c/h files
justin-stephenson
committed
AD: Initialize new failover
justin-stephenson
committed
ad: remove no longer needed connection logic
justin-stephenson
committed
DONOTMERGE ipa: code to fix when IPA provider is ported to new failover
justin-stephenson
committed
WIP: AD: Port provider to new failover
justin-stephenson
committed
ad: Unset DPM_CHECK_ONLINE handler
justin-stephenson
committed
AD Init: Remove DNS discovery (it keeps finding ldap.test)
justin-stephenson
committed
AD: Add GC usage logic function
justin-stephenson
committed
AD: Switch to LDAP connection for groups membership data
justin-stephenson
committed
gpo: move offline processing for new failover
justin-stephenson
committed