URL:
https://github.com/SSSD/sssd/pull/209
Title: #209: IPA: lookup AD users by certificates on IPA clients
jhrozek commented:
"""
These patches look OK, but I suspect we might have a bug in the IFP list code. I added a
certificate to a user's idview entry and now listing the certificate shows:
```
dbus-send --system --print-reply --dest=org.freedesktop.sssd.infopipe
/org/freedesktop/sssd/infopipe/Users org.freedesktop.sssd.infopipe.Users.ListByCertificate
string:"$(cat cert.pem)" uint32:100
method return time=1490786867.303117 sender=:1.40 -> destination=:1.42 serial=7
reply_serial=2
array [
object path "/org/freedesktop/sssd/infopipe/Users/ipa_2etest/679800500"
object path
"/org/freedesktop/sssd/infopipe/Users/win_2etrust_2etest/679800500"
object path
"/org/freedesktop/sssd/infopipe/Users/sibling_2ewin_2etrust_2etest/679800500"
object path
"/org/freedesktop/sssd/infopipe/Users/child_2ewin_2etrust_2etest/679800500"
]
```
The user is only in the win.trust.test domain:
```
[jhrozek@client] sssd $ [(review)] getent passwd 679800500
administrator@win.trust.test:*:679800500:679800500:Administrator:/home/win.trust.test/administrator:
```
"""
See the full comment at
https://github.com/SSSD/sssd/pull/209#issuecomment-290061842