On Wed, Nov 05, 2014 at 01:46:28PM +0100, Jakub Hrozek wrote:
On Fri, Oct 31, 2014 at 02:36:54PM +0100, Pavel Březina wrote:
> AFAIK all group object in IPA has ipaUserGroup object class so it should be
> general enough to cover all type of groups but excluding roles.
> From cf85760923a112687bfbabbcc487851f627de73f Mon Sep 17 00:00:00 2001
> From: =?UTF-8?q?Pavel=20B=C5=99ezina?= <pbrezina(a)redhat.com>
> Date: Fri, 31 Oct 2014 14:26:30 +0100
> Subject: [PATCH] IPA: use ipaUserGroup object class for groups
> dfb34c6c82ed5014599bf70de6791e6d79106fc2 changed object class
> of IPA groups from posixGroups to more general groupOfNames.
> However, this object class is used also for roles, permissions and
> privileges which caused SSSD to consider those objects to be groups as
> well during initgroups.
POSIX, non-POSIX and user-private groups still work fine.
* master: 3937736546e2a4b7cccc58fded3efdff9ae690fc
* sssd-1-11: f070a93e7dd6b594d8652718e513a18ec389fc2c