On Mon, 2011-08-29 at 10:15 -0400, Stephen Gallagher wrote:
On Sun, 2011-08-21 at 17:54 +0200, Jakub Hrozek wrote:
>
https://fedorahosted.org/sssd/ticket/973
>
> I'm pretty sure this patch will fix the problem John Hodrien had with
> dereference code, although I have not reproduced the problem using
> referrals as he did, but simpler:
>
> i) use the dereference code, but process a group that is below the full
> deref threshold (<10 members by default)
> ii) one of its members is neither user nor group and is not cached
> iii) the dereference code always tries to move the "expired group index"
> not the "missing DN index" so the missing DN array never reaches the
> NULL sentinel
Ack. Looks good to me.
Pushed to master.
Backported to sssd-1-6 as well (needed to be applied to
sdap_async_accounts.c)