Hello Michal,

code LGTM but I haven't tested it yet.

Could you add ticket number (https://fedorahosted.org/sssd/ticket/2436) to the patch?

Thanks,

Pavel


On 09/10/2014 01:23 PM, Michal Židek wrote:
Hi,

this patch should solve regression on IPA server
triggered by the patches for this ticket:
https://fedorahosted.org/sssd/ticket/2343

Patches for #2343 solved the IPA side of the
problem by searching for objectclass groupOfNames
instead of posixGroup (which was not available in
non-posix groups). But (as we discovered now) not
all groups in IPA are members of the objectClass
groupOfNames (the private groups created
automatically for users are not, so as a result
we were not able to query them). So there is
no common objectclass for all groups in IPA that
would be suitable for group query filters.

So these 2 patches add the possibility to query
groups using primary and alternative objectClass
(ORed in the filter).

I tested the patches, but I would feel safer if
someone pushed them to Beaker and run QE tests
on it before pushing (I thing Jakub volunteered
for this task off-list :) ).

Thank you,
Michal


_______________________________________________
sssd-devel mailing list
sssd-devel@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-devel