On Tue, 2013-01-15 at 09:02 +0100, Jakub Hrozek wrote:
https://fedorahosted.org/sssd/ticket/1757
When the user entry was missing completely after initgroups, we would
never invalidate the user entry from cache. This led to dangling cache
entried in memory cache if the user was removed from the server while
still being in memory cache.
0001: Why are we unconditionally deleting the user from the memory cache
even if just groups changed ?
0002: Please add a comment in be_initgroups_prereq() that the first id
it he user's primary gid and 'might' be duplicated later ?
Also why do we skip verifying the primary gid ?
Simo.
--
Simo Sorce * Red Hat, Inc * New York