URL:
https://github.com/SSSD/sssd/pull/1011
Author: pbrezina
Title: #1011: sysdb: check if the id override belongs to requested domain
Action: opened
PR body:
"""
Steps to reproduce:
1. Setup an id override (administrator(a)ad.vm: uid -> 10001)
2. Request user by name to fill cache
```
$ id Administrator(a)ad.vm
uid=10001(administrator(a)ad.vm) ...
```
3. Request user by id and see that domain part is missing
```
$ id 10001
uid=10001(administrator) ...
```
First, the uid is looked up in IPA domain and the override object is
found when we hit `sysdb_search_override_by_id` because id values are
not qualified. Therefore the origin object (administrator(a)ad.vm) is
returned as part of IPA domain.
We need to check if the original object belongs to the requested domain.
Resolves:
https://pagure.io/SSSD/sssd/issue/4173
"""
To pull the PR as Git branch:
git remote add ghsssd
https://github.com/SSSD/sssd
git fetch ghsssd pull/1011/head:pr1011
git checkout pr1011