URL:
https://github.com/SSSD/sssd/pull/893
Author: sumit-bose
Title: #893: ipa: use LDAP not extdom to lookup IPA users and groups
Action: opened
PR body:
"""
Currently when an IPA client is resolving trusted users and groups with
the help of the extdom plugin it uses the extdom plugin as well to
lookup IPA objects. This might cause issues if e.g. there is a user in
IPA with the same name as a group in AD or the other way round.
To solve this and to lower the load on the extdom plugin on the IPA
server side this patch will lookup IPA object directly from LDAP on the
IPA server.
Related to
https://pagure.io/SSSD/sssd/issue/4073
Reviewed-by: Pavel Březina <pbrezina(a)redhat.com>
(cherry picked from commit 27b141f38dd04d4b69e609a4cc64676a0716226e)
"""
To pull the PR as Git branch:
git remote add ghsssd
https://github.com/SSSD/sssd
git fetch ghsssd pull/893/head:pr893
git checkout pr893