URL:
https://github.com/SSSD/sssd/pull/174
Title: #174: One certificate for multiple users
jhrozek commented:
"""
On Thu, Mar 09, 2017 at 04:30:48AM -0800, sumit-bose wrote:
Thank you for testing. The code looking up overrides for IPA users
was not prepared to handle multiple results. I added a patch to handle this at least for
lookups by certificate. Wildcard lookups via InfoPipe currently just error out here, i.e.
the objects are saved but the check if an override exists is skipped. I guess this should
be fixed sooner or later as well.
OK, with this version I'm no longer seeing a crash, but I'm still seeing
the issue described in
https://pagure.io/SSSD/sssd/issue/3321
FindByNameAndCertificate works fine and I have no other comments for the
code.
The overrides patch looks fine to me code-wise but I didn't run many
tests so far..
Do you think we should be fixing #3321 as part of this patch?
@pbrezina do you have any thoughts about the GND_DESCEND question
earlier?
"""
See the full comment at
https://github.com/SSSD/sssd/pull/174#issuecomment-285498215