URL:
https://github.com/SSSD/sssd/pull/209
Title: #209: IPA: lookup AD users by certificates on IPA clients
jhrozek commented:
"""
So then the consumer of the API is expected to iterate over the paths and find a non-empty
attribute? Because the paths from the domains where the user is not are not usable in the
sense the getters return only the default attribute
```
[jhrozek@client] sssd $ [(review)] dbus-send --print-reply --system
--dest=org.freedesktop.sssd.infopipe
/org/freedesktop/sssd/infopipe/Users/ipa_2etest/679800500
org.freedesktop.DBus.Properties.Get string:org.freedesktop.sssd.infopipe.Users.User
string:name
method return time=1490792119.531265 sender=:1.61 -> destination=:1.70 serial=9
reply_serial=2
variant string ""
```
THe path from the correct domain works
```
[jhrozek@client] sssd $ [(review)] dbus-send --print-reply --system
--dest=org.freedesktop.sssd.infopipe
/org/freedesktop/sssd/infopipe/Users/win_2etrust_2etest/679800500
org.freedesktop.DBus.Properties.Get string:org.freedesktop.sssd.infopipe.Users.User
string:name
method return time=1490792131.291432 sender=:1.61 -> destination=:1.71 serial=11
reply_serial=2
variant string "administrator(a)win.trust.test"
```
"""
See the full comment at
https://github.com/SSSD/sssd/pull/209#issuecomment-290081343