On Tue, Jan 05, 2016 at 01:58:42PM +0100, Pavel Březina wrote:
On 01/04/2016 03:36 PM, Sumit Bose wrote:
>Hi,
>
>when processing nested group memberships from multiple domains SSSD
>might try to add a group to a wrong domain which will cause lookup
>errors later because the group cannot be looked up in the wrong domain.
>To avoid this the 2nd patch tries to determine the domain based on the
>SID of the group if available. Unfortunately I wasn't able to reproduce
>the issue so far but the original reported confirmed that the patch
>fixes the issue for him.
>
>The first patch is a related issue I found while debugging the group
>issue. There is no error caused by this but it might cause a LDAP lookup
>for the user although it is already in the cache.
>
>bye,
>Sumit
Ack.
* master:
* cc1370dab6de99e50ac41126b500382f0aaa73ae
* 0c1fe8a15cced95e8451ad4c9260c5e4ecca45f1
* sssd-1-13:
* b3daf18a8e3d5c1b329d4f8c96242cd88445776e
* 52a78ca91b645b369d6d4cc614b3f1cd7003c1cb