sumit-bose commented on a pull request
On Tue, Aug 30, 2016 at 12:36:20PM -0700, Jakub Hrozek wrote:
On Tue, Aug 30, 2016 at 11:47:09AM -0700, lslebodn wrote:
About the discussion I saw on #sssd in backscroll, the rfc2307bis schema
only uses the member attribute because IIRC the RFC doesn't talk about
memberof at all. But in IPA, we know the specifics on the schema, so we
are able to dereference the memberof attribute to get a complete list of
all groups with one call.
Unfortunately it is more complicated with IPA because memberOf only
contains the direct memberships, there is a second attribute
memberofindirect which hold the indirect memberships.
See the full comment at https://github.com/SSSD/sssd/pull/7#issuecomment-243683146