>From 517071d4a2817cf122fd36483fe57f309edcd8eb Mon Sep 17 00:00:00 2001 From: Lukas Slebodnik Date: Fri, 25 Oct 2013 19:27:27 +0200 Subject: [PATCH 2/2] FIX_FOR: AD: Search GC by default during access control, fall back to LDAP --- src/providers/ad/ad_access.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/providers/ad/ad_access.c b/src/providers/ad/ad_access.c index 68d0200f769297084dfae11bc838716333acdf07..50d5f98ed2c13733c639da2c2dc935c905eaf9ee 100644 --- a/src/providers/ad/ad_access.c +++ b/src/providers/ad/ad_access.c @@ -273,8 +273,12 @@ ad_access_send(TALLOC_CTX *mem_ctx, } /* Always try GC first */ + ctx->gc_ctx->ignore_mark_offline = false; state->clist[0] = ctx->gc_ctx; if (IS_SUBDOMAIN(domain) == false) { + /* fall back to ldap if gc is not available */ + clist[0]->ignore_mark_offline = true; + /* With root domain users we have the option to * fall back to LDAP in case ie POSIX attributes * are used but not replicated to GC -- 1.8.3.1