On Mon, Sep 23, 2013 at 01:35:28PM +0200, Lukas Slebodnik wrote:
>That's a side-effect of the hack I didn't think about..I
didn't realize
>we also check the negative cache again when returning the users.
>
>Can you check if it would help to use "filter_users = john@local_home" ?
>
This will not help, because john can be found in the both domains.
Like Pavel wrote, we don't skip first domain if getpwuid is called.
I actually think multiple domains with overlapping UIDs are not really
supportable.
Using the LDAP filtering would move the logic to the backend side, which
might work.