URL:
https://github.com/SSSD/sssd/pull/5404
Title: #5404: nss: check if groups are filtered during initgroups
sumit-bose commented:
"""
> > Do you think that there's is someone who's using
this behavior?
>
>
> Do you mean that somebody relies on the fact that a user can still be a member of a
filtered group?
Yes. IMHO since you can't resolve the group's name, you'd need to work with
gid only. And filtering out group only to match it by gid in user's initgroups sounds
like nonsense and we can just filter it from initgroups unconditionally.
Ok, thanks, then the patch can be used as it is, I've set the `Waiting for Review`
label.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/5404#issuecomment-733060554