From 982f5f89565526bddcdd325913dc9bcc4d1d7b37 Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Thu, 4 Dec 2014 12:50:03 +0100 Subject: [PATCH 2/2] IPA: handle GID overrides for MPG domains on clients Resolves https://fedorahosted.org/sssd/ticket/2514 --- src/providers/ipa/ipa_s2n_exop.c | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) diff --git a/src/providers/ipa/ipa_s2n_exop.c b/src/providers/ipa/ipa_s2n_exop.c index 0eab1afc36e4d2c1d770c596c512a641fd276425..a0c905715091c7b9f4854c34f9d20a4bb3d20d16 100644 --- a/src/providers/ipa/ipa_s2n_exop.c +++ b/src/providers/ipa/ipa_s2n_exop.c @@ -1543,6 +1543,7 @@ static errno_t ipa_s2n_save_objects(struct sss_domain_info *dom, char *realm; char *upn = NULL; gid_t gid; + gid_t orig_gid = 0; TALLOC_CTX *tmp_ctx; const char *sid_str; const char *tmp_str; @@ -1714,6 +1715,31 @@ static errno_t ipa_s2n_save_objects(struct sss_domain_info *dom, gid = 0; if (dom->mpg == false) { gid = attrs->a.user.pw_gid; + } else { + /* The extdom plugin always returns the objects with the + * default view applied. Since the GID is handled specially + * for MPG domains we have add any overridden GID separately. + */ + ret = sysdb_attrs_get_uint32_t(attrs->sysdb_attrs, + ORIGINALAD_PREFIX SYSDB_GIDNUM, + &orig_gid); + if (ret == EOK || ret == ENOENT) { + if ((orig_gid != 0 && orig_gid != attrs->a.user.pw_gid) + || attrs->a.user.pw_uid != attrs->a.user.pw_gid) { + ret = sysdb_attrs_add_uint32(attrs->sysdb_attrs, + SYSDB_GIDNUM, + attrs->a.user.pw_gid); + if (ret != EOK) { + DEBUG(SSSDBG_OP_FAILURE, + "sysdb_attrs_add_uint32 failed.\n"); + goto done; + } + } + } else { + DEBUG(SSSDBG_OP_FAILURE, + "sysdb_attrs_get_uint32_t failed.\n"); + goto done; + } } ret = sysdb_store_user(dom, name, NULL, -- 2.1.0