[SSSD] [PATCH] Do not delete users, groups outside domain range

Stephen Gallagher sgallagh at redhat.com
Wed Nov 4 16:16:57 UTC 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 11/04/2009 11:03 AM, Simo Sorce wrote:
> On Wed, 2009-11-04 at 11:00 -0500, Stephen Gallagher wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> On 11/04/2009 08:12 AM, Jakub Hrozek wrote:
>>> Fixes: #240
>>
>>
>> Nack.
>>
>> id_in_range() would return EOK if ID == 0.
>>
>> This makes sense in sss_useradd() where an ID of 0 implies that we're
>> automatically generating the ID, but when deleting, we should recognize
>> it as being below the acceptable range.
> 
> Well, at the moment you can't store an id of 0, so is this really a
> problem ?
> 
> Simo.
> 

A stupid admin with ldbmodify or ldbedit could set an ID manually to 0.
I'm just covering all of our bases.

Might as well do it right in case things change later.

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkrxqPMACgkQeiVVYja6o6OdfgCcDlDbcjZZsVsY4h2KjY6TgZV0
jSwAoJPhNvQvNJem+P3Dp1ZV9+6Zmy4c
=sTZZ
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list