>From 59a7dddac5d1eb2cdfb98e0003dabd9ca705a9cd Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Thu, 27 Sep 2012 19:58:43 +0200 Subject: [PATCH] Flip the default value of ldap_initgroups_use_matching_rule_in_chain https://fedorahosted.org/sssd/ticket/1535 diff --git a/src/man/sssd-ldap.5.xml b/src/man/sssd-ldap.5.xml index c3d5838a4045bd21b10814edb5b18e89651b185f..70a6eb27ef9fc5e03cd8db8b644ddb05b4af28a9 100644 --- a/src/man/sssd-ldap.5.xml +++ b/src/man/sssd-ldap.5.xml @@ -887,7 +887,7 @@ This option tells SSSD to take advantage of an - Active Directory-specific feature which will speed + Active Directory-specific feature which might speed up initgroups operations (most notably when dealing with complex or deep nested groups). @@ -904,7 +904,7 @@ MSDN(TM) documentation for more details. - Default: True + Default: False diff --git a/src/providers/ad/ad_opts.h b/src/providers/ad/ad_opts.h index 57beeb9de367364ac3b7b1be1d629259c28c7425..fd2fe66938cea546bc8e8c1f7ced58a8e0abda21 100644 --- a/src/providers/ad/ad_opts.h +++ b/src/providers/ad/ad_opts.h @@ -119,7 +119,7 @@ struct dp_option ad_def_ldap_opts[] = { { "ldap_idmap_default_domain", DP_OPT_STRING, NULL_STRING, NULL_STRING }, { "ldap_idmap_default_domain_sid", DP_OPT_STRING, NULL_STRING, NULL_STRING }, { "ldap_groups_use_matching_rule_in_chain", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE }, - { "ldap_initgroups_use_matching_rule_in_chain", DP_OPT_BOOL, BOOL_TRUE, BOOL_FALSE }, + { "ldap_initgroups_use_matching_rule_in_chain", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE }, DP_OPTION_TERMINATOR }; diff --git a/src/providers/ldap/ldap_opts.h b/src/providers/ldap/ldap_opts.h index 5a5fa789576c39fedf9e7f9dfec81a2b12939bf8..0d80b04cb0dbe20bffeee88ff7b8c9e931e3798d 100644 --- a/src/providers/ldap/ldap_opts.h +++ b/src/providers/ldap/ldap_opts.h @@ -111,7 +111,7 @@ struct dp_option default_basic_opts[] = { { "ldap_idmap_default_domain", DP_OPT_STRING, NULL_STRING, NULL_STRING }, { "ldap_idmap_default_domain_sid", DP_OPT_STRING, NULL_STRING, NULL_STRING }, { "ldap_groups_use_matching_rule_in_chain", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE }, - { "ldap_initgroups_use_matching_rule_in_chain", DP_OPT_BOOL, BOOL_TRUE, BOOL_FALSE }, + { "ldap_initgroups_use_matching_rule_in_chain", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE }, DP_OPTION_TERMINATOR }; -- 1.7.11.4