sumit-bose commented on a pull request

""" On Tue, Aug 30, 2016 at 12:36:20PM -0700, Jakub Hrozek wrote:

On Tue, Aug 30, 2016 at 11:47:09AM -0700, lslebodn wrote:

About the discussion I saw on #sssd in backscroll, the rfc2307bis schema only uses the member attribute because IIRC the RFC doesn't talk about memberof at all. But in IPA, we know the specifics on the schema, so we are able to dereference the memberof attribute to get a complete list of all groups with one call.

Unfortunately it is more complicated with IPA because memberOf only contains the direct memberships, there is a second attribute memberofindirect which hold the indirect memberships.

bye, Sumit

"""

See the full comment at https://github.com/SSSD/sssd/pull/7#issuecomment-243683146