URL:
https://github.com/SSSD/sssd/pull/234
Title: #234: HBAC: Use memberof ASQ search instead of originalMemberOf
sumit-bose commented:
"""
I agree on the first part, but the second is not clear, sorry. The
ipa_groups_basedn is the group container, but the members[i]->dn variable is the full
group DN, so they will never match..right?
ah, sorry, copy-and-paste error, I meant to use ldb_dn_compare_base() instead of plain
ldb_dn_compare().
"""
See the full comment at
https://github.com/SSSD/sssd/pull/234#issuecomment-301751470