please see attached patches and read commit messages for more details.
As I do not have a Tivoli server handy, customer was so nice that he
verified that patches are fixing the problem for him.
If function sdap_idmap_sid_to_unix return error code ENOTSUP
then error message will be printed: "Skipping buit-in object"
Processing of sids will continue an variable ret will be overridden with return
code from function sdap_idmap_sid_to_unix, therefore storing EOK to variable
simple patch is attached.
attached are more patches that are related to running sssd as a
non-root. I split the functions to become a different user into a
separate module and provided unit tests using nss_wrapper and
There is a separate Makefile.am for the cwrap-based tests, because it's
not easy (read: possible without a wrapper script) to run tests with a
custom environment. Some build systems, like cmake, allow that, but
autotools does not.