URL:
https://github.com/SSSD/sssd/pull/257
Author: fidencio
Title: #257: LDAP/AD: Do not fail in case rfc2307bis_nested_groups_recv() returns ENOENT
Action: opened
PR body:
"""
Commit 25699846 introduced a regression seen when an initgroup lookup is
done and there's no nested groups involved.
In this scenario the whole lookup fails due to an ENOENT returned by
rfc2307bis_nested_groups_recv(), which leads to the user removal from
sysdb causing some authentication issues.
The problem was caught by the "Allow only single user from domain1"
test, part of ad_access_filter tests (present in
"client-ad_provider-ad_forest" package) ran and reported by Lukáš
Slebodnik.
Resolves:
https://pagure.io/SSSD/sssd/issue/3331
Signed-off-by: Fabiano Fidêncio <fidencio(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghsssd
https://github.com/SSSD/sssd
git fetch ghsssd pull/257/head:pr257
git checkout pr257