On 09/22/2015 03:03 PM, Pavel Reichl wrote:
Hello,
please see attached patch.
Thanks!
Hi,
- state->filter = talloc_asprintf(state,
"(|(%s=*)(%s=*))",
+ state->filter = talloc_asprintf(state,
+ "(|(&(%s=*)(objectclass=%s))(&(%s=*)(objectclass=%s)))",
opts->user_map[SDAP_AT_USER_UID].name,
- opts->group_map[SDAP_AT_GROUP_GID].name);
+ opts->user_map[SDAP_OC_USER].name,
+ opts->group_map[SDAP_AT_GROUP_GID].name,
+ opts->group_map[SDAP_OC_GROUP].name);
I don't understand, how it got relaxed? The original filter already
tests only for presence of uid or gid. Or am I missing something?