On Mon, 2011-05-09 at 10:20 -0400, Stephen Gallagher wrote:
sdap_parse_deref() assumes that it can determine the mapping to use
based on the objectClass, but this falls down in situations like Magic
Private Groups, where user entries have both the posixAccount and
posixGroup attribute.
This never happens, we tried that approach and too many clients failed
to handle it.
Magic Private Groups in IPA are created through the Managed Entries
plugin and are 2 separate objects now.
That said, if we can make the code work if such entries (with both
objectclasses) were found I'd like that.
Simo.
--
Simo Sorce * Red Hat, Inc * New York