URL:
https://github.com/SSSD/sssd/pull/484
Author: sumit-bose
Title: #484: SDAP: skip builtin AD groups in sdap_save_grpmem()
Action: opened
PR body:
"""
While processing group memberships SSSD might accidentally save builtin
or other well known AD groups. With this patch those groups are skipped
similar as e.g. in sdap_save_group().
Resolves
https://pagure.io/SSSD/sssd/issue/3610
There are other ways to solve the issue reported in ticket #3610, e.g. making
sure 'isPosix=False' is added to the group object in the cache. But since the
builtin groups are also ignored in sdap_save_group() I think this way is
currently more consistent. Long term I think we should find a way to assign
POSIX IDs to the well-known SIDs so that we can treat them as Posix objects.
"""
To pull the PR as Git branch:
git remote add ghsssd
https://github.com/SSSD/sssd
git fetch ghsssd pull/484/head:pr484
git checkout pr484