URL:
https://github.com/SSSD/sssd/pull/5663
Title: #5663: cache_req: replace FQNs by shortnames
pbrezina commented:
"""
Hi Iker, this does not fix the root cause of the issue, it just hides it. The cause is:
1. In
[`resolv_ghosts_send`](https://github.com/SSSD/sssd/blob/master/src/responder/ifp/ifp_groups.c#L672)
we load the qualified name from the cache and send cache request with both group name and
domain name set.
2. Then in
[`cache_req_process_input`](https://github.com/SSSD/sssd/blob/master/src/responder/common/cache_req/cache_req.c#L1182)
we hit this branch (because domain != NULL) and we assume that the input name does not
need to be parsed.
3. Therefore the parsed name is set to the input name (group@domain) and then we construct
group@domain@domain as the lookup name.
If think what needs to be done is to parse the name anyway to always get non-qualified
name and then check if the domain from parsed group name equals to domain from the input
parameter for safety.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/5663#issuecomment-863160953