[SSSD] [PATCH] fix initgroups call

Stephen Gallagher sgallagh at redhat.com
Fri Nov 6 17:02:20 UTC 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 11/04/2009 05:59 PM, Simo Sorce wrote:
> This set of patches ends up fixing the initgroups call.
> It still uses the slowest possible method, a future improvement is to
> use the deref (IPA/DS/OpenLDAP) or the ASQ (AD) controls to reduce the
> number of LDAP searches.
> 
> Patches 0001 though 0004 are dependencies for 0005
> 
> 0001: add way to get a string w/o manually parsing the attributes

Ack

> 
> 0002: make function public and move it to sdap.c
> 

Ack

> 0003: this is also needed by the access modules, stores the original
> memberof DNs
> 

Ack

> 0004: remove redundant code and at the same time make it easier to use
> the generic search function for users and groups retrieval. With this
> change it will be possible to reduce further code duplication my
> changing the code that searches for users and groups to use the generic
> search function (I plan to do this once the patch is accepted)
> 

Ack

> 0005: initgroups call fixups make it work and have specialized code
> depending on the schema used (still doesn't fully support nested groups
> in AD, but that is not a priority right now)
> 

Ack

> I have tested it with an IPA 1.2 server and seem to work properly.
> 
> Simo.
> 
> 
> 
> 
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel


- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkr0VpgACgkQeiVVYja6o6OIIgCcCkBBa2Zv6K/4sAObR6Mg2Uev
oIMAn2nZR1wPj/3Wx9QkzfUUKgst28Lu
=IqsB
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list