this patch fixes an issue in the IPA override code described in
https://fedorahosted.org/sssd/ticket/2874. If the user name is
overridden with itself the name is written to the alias attribute twice
causing an ldb error.
this patch should suppress the
"sdap_idmap_domain_has_algorithmic_mapping] (0x0080): Could not parse
domain SID from [(null)] ]]]" which e.g. is regularly seen with the IPA
provider when there is no trust support enabled on the IPA server.
please see the attached patch. I tested it by following:
with the new patch, just adding:
autofs_provider = ad is enough.
I wrote the new provider because it's IMO the more systematic solution
to #2862 than any hacks in failover.
I would like to release 1.13.3 tarball no later than Tuesday Dec-15. There
is a number of tickets that were not closed and I'm wondering whether to
move them to 1.13.4 or 1.14 Alpha. So far I'm thinking that:
- anything our downstream requires should stay in 1.13.4
- the rest, that's mostly tests and debug message improvements, like
setting the default debug level to 2 should go into 1.14 Alpha.
- #2751 should be deferred until we have the faulty GPO file
- the tickets with patch submitted can stay, we'll see how many
patches we review until the release
Are there other opinions?
On Fri, Dec 04, 2015 at 09:51:50AM -0500, Dan Lavu wrote:
> Go for it, wasn't aware that non R2 is supported upstream.
Unless anyone opposes, I will push the attached patch with Dan's
authorship and my RB later today.