From fa4c0ae3218cadda5f50dd801985f602945a729f Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Fri, 13 Nov 2015 12:10:17 +0100 Subject: [PATCH 1/2] ldap: skip sdap_save_grpmem() if ignore_group_members is set Related to https://fedorahosted.org/sssd/ticket/2868 --- src/providers/ldap/sdap_async_groups.c | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/src/providers/ldap/sdap_async_groups.c b/src/providers/ldap/sdap_async_groups.c index 609668339b7d7d37e578bd3cca8f8c7cac1e6671..c15a6a2bd724498aaf59b7ed3172ec4ed09abb9d 100644 --- a/src/providers/ldap/sdap_async_groups.c +++ b/src/providers/ldap/sdap_async_groups.c @@ -876,6 +876,14 @@ static int sdap_save_grpmem(TALLOC_CTX *memctx, size_t nuserdns = 0; int ret; + if (dom->ignore_group_members) { + DEBUG(SSSDBG_CRIT_FAILURE, + "Group members are ignored, nothing to do. If you see this " \ + "message it might indicate an error in the group processing " \ + "logic.\n"); + return EOK; + } + ret = sdap_get_group_primary_name(memctx, opts, attrs, dom, &group_name); if (ret != EOK) { DEBUG(SSSDBG_OP_FAILURE, "Failed to get group name\n"); -- 2.1.0