From e1234ecdb8c0719e517187c5935f333e966a5466 Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Wed, 4 Mar 2015 15:05:11 +0100 Subject: [PATCH 1/2] ipa: do not treat missing sub-domain users as error Resolves: https://fedorahosted.org/sssd/ticket/2444 --- src/providers/ipa/ipa_s2n_exop.c | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/src/providers/ipa/ipa_s2n_exop.c b/src/providers/ipa/ipa_s2n_exop.c index 18f2a867df3ad705008537843ea94e38dab0006e..d5e94806115df8fc6c6fcb9af9782f51119ba7f0 100644 --- a/src/providers/ipa/ipa_s2n_exop.c +++ b/src/providers/ipa/ipa_s2n_exop.c @@ -147,9 +147,13 @@ static void ipa_s2n_exop_done(struct sdap_op *op, sss_ldap_err2string(result), result, errmsg); if (result != LDAP_SUCCESS) { - DEBUG(SSSDBG_OP_FAILURE, "ldap_extended_operation failed, " \ - "server logs might contain more details.\n"); - ret = ERR_NETWORK_IO; + if (result == LDAP_NO_SUCH_OBJECT) { + ret = ENOENT; + } else { + DEBUG(SSSDBG_OP_FAILURE, "ldap_extended_operation failed, server " \ + "logs might contain more details.\n"); + ret = ERR_NETWORK_IO; + } goto done; } -- 2.1.0