URL:
https://github.com/SSSD/sssd/pull/209
Title: #209: IPA: lookup AD users by certificates on IPA clients
lslebodn commented:
"""
On (29/03/17 05:57), Jakub Hrozek wrote:
So then the consumer of the API is expected to iterate over the paths
and find a non-empty attribute? Because the paths from the domains where the user is not
are not usable in the sense the getters return only the default attribute
```
[jhrozek@client] sssd $ [(review)] dbus-send --print-reply --system
--dest=org.freedesktop.sssd.infopipe
/org/freedesktop/sssd/infopipe/Users/ipa_2etest/679800500
org.freedesktop.DBus.Properties.Get string:org.freedesktop.sssd.infopipe.Users.User
string:name
method return time=1490792119.531265 sender=:1.61 -> destination=:1.70 serial=9
reply_serial=2
variant string ""
```
THe path from the correct domain works
```
[jhrozek@client] sssd $ [(review)] dbus-send --print-reply --system
--dest=org.freedesktop.sssd.infopipe
/org/freedesktop/sssd/infopipe/Users/win_2etrust_2etest/679800500
org.freedesktop.DBus.Properties.Get string:org.freedesktop.sssd.infopipe.Users.User
string:name
method return time=1490792131.291432 sender=:1.61 -> destination=:1.71 serial=11
reply_serial=2
variant string "administrator(a)win.trust.test"
```
IMHO it worth to file a ticket. (at least)
LS
"""
See the full comment at
https://github.com/SSSD/sssd/pull/209#issuecomment-290151595