Hi,
this patch should solve regression on IPA server
triggered by the patches for this ticket:
https://fedorahosted.org/sssd/ticket/2343
Patches for #2343 solved the IPA side of the
problem by searching for objectclass groupOfNames
instead of posixGroup (which was not available in
non-posix groups). But (as we discovered now) not
all groups in IPA are members of the objectClass
groupOfNames (the private groups created
automatically for users are not, so as a result
we were not able to query them). So there is
no common objectclass for all groups in IPA that
would be suitable for group query filters.
So these 2 patches add the possibility to query
groups using primary and alternative objectClass
(ORed in the filter).
I tested the patches, but I would feel safer if
someone pushed them to Beaker and run QE tests
on it before pushing (I thing Jakub volunteered
for this task off-list :) ).
Thank you,
Michal