Hi,
this two patches allow to have extra user attributes, like e.g. a
telephone number, for AD users of trusted domains on the IPA clients.
This first makes it possible that the attributes given in
ldap_user_extra_attrs can be read from AD in ipa-server-mode. The second
extends the list of attributes returned by sss_nss_getorigbyname().
bye,
Sumit
P.S. in the first patch I used sdap_extend_map_with_list() as it is used
in other places as well where the maps in the 4th and 6th argument are
the same. If I see it correctly we are leaking the old version of the
map this way. Since this currently happen only once during init it does
not do much harm, but maybe a ticket to fix this might be useful.