On Tue, Nov 26, 2013 at 11:51:41AM +0100, Sumit Bose wrote:
Hi,
Steeve found some issues when testing sss_cache with sub-domain users.
This was originally fixed in
https://fedorahosted.org/sssd/ticket/1741
but I guess recent changes have broken it again.
I have tested the patches with users and groups. It would be nice is
someone with a suitable environment can test them for the other object
types as well.
bye,
Sumit
Hi,
during testing I found out that there is a difference in how we store
the nameAlias attribute for subdomain users retrieved with the exended
operation to IPA and subdomain users that are stored with the LDAP
provider.
The IPA subdomain users have lowercase the whole alias (so typically
user(a)windows.domain) while the LDAP users have only the name component
lowercased (user(a)WINDOWS.DOMAIN). Currently sss_cache only works with he
latter.
As discussed on IRC, we should pick on scheme and use it, ideally with
some helper function.