master
DP: Switch to new interface
sdap: remove be context from sdap_cli_connect code
LDAP: New option to trigger password change in case of grace login with expired password
Helpers to do a basic setup of a child process.
LDAP: move `select_principal_from_keytab()` to 'ldap_child'
SUBID: don't require search bases to be set in advance
SUBID: trusted subdomains aren't currently supported
UTIL: Introduicing SPRItime
PTasks: Make sure periodical tasks use randomization
Update DEBUG* invocations to use new levels
'strtonum' helpers: usage sanitization
SUBID: sanitize range owner dn
sdap: defer libldap global options setup to first connection
LDAP: add subid ranges support
LDAP: Implement iphost cleanup for expired cache entries
sudo: warn when ldap_sudo_search_base falls back to root DN
IPA: Add password expiration warning when using ssh keys
Drop support of 'ad_allow_remote_domain_local_groups'
SDAP: use DEBUG_CONDITIONAL in the hot paths
sdap: add struct sdap_attr_map_info_ex
SDAP: Properly handle group id-collision when renaming incomplete groups
dhash tables are now created with count=0 whenever no useful size hint available
'strto*()': usage sanitization
LDAP: Add enum request with custom connection
sdap: eliminate O(N^2) loop in `sdap_add_incomplete_groups()`
SSH: sss_ssh_knownhosts must ignore DNS errors
LDAP: free tmp var within the loop
SYSDB: Dont store gid 0 for non-posix groups
sdap: removed unused dom parameter from sdap_get_primary_name()
Honor ldap filters
sdap: new type SDAP_NESTED_GROUP_DN_IGNORE
LDAP: Add support for ipnetworks enumeration
Duplicate include guard
LDAP: few debug message corrections
Fix error in hostname retrieval
ldap: make sure realm is set
SDAP: Include struct ldb_dn in struct sdap_search_base
whitespace: fix issues found by pre-commit
DEBUG: got rid of most explicit DEBUG_IS_SET checks as a preliminary step for "logs backtrace" feature
sdap_select_principal_from_keytab_sync: waitpid() synchronously
Include sys/wait.h where needed
Exclude specific IP addresses from dynamic DNS updates
debug: enable chain id in backend
LDAP: reduced log level in hosts_get_done()
providers: Move hostid from ipa to sdap, v2
SDAP: Remove unused sdap_id_ctx from sdap_id_conn_cache_create
sdap_idmap: Enabling further debugging for to understand the underlying reason for Could not convert objectSID.
sdap_idmap_domain_has_algorithmic_mapping: add domain name argument
LDAP: Prepare for iphost lookups
LDAP: Prepare for ipnetwork lookups (no enumeration)
ldap: add base_dn to sdap_search_bases
Adding option to disable retrieving large AD groups.
IPA/AD/LDAP: Increase the initgrExpireTimestamp after finishing refresh request
SYSDB: Convert cached domain 'enumerated' attribute from bool to uint
sudo: reschedule periodic tasks when full refresh is finished
sudo: skip smart refresh if it happens inside full refresh
sdap: add set_non_posix parameter
DEBUG: lower debug level of several messages