[SSSD] [PATCHES] Handle nested groups in RFC2307bis (sssd-1-2)

Stephen Gallagher sgallagh at redhat.com
Wed Oct 6 15:48:31 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

These patches apply atop Jakub's "Fix initgroup processing for RFC2307
(sssd-1.2)" patches.

Patch 0002: Add option to limit nested groups

Patch 0003: Handle nested groups in RFC2307bis

This first approach handles the non-optimized "pure" RFC2307bis
case. It recursively calls into nested groups until it it has
found them all or hits the pre-defined nesting limit.

It then saves all member users first, then all groups to the sysdb


This patch only handles the general case of RFC2307bis nested groups. It
contains no optimizations for memberOf implementations. Given that we
have time constraints, this patch should handle all implementations of
RFC2307bis correctly (if not high-performance).

Support for partial (AD) and complete (IPA) memberOf will be added to
the master branch later.


Still to do: initgroups for RFC2307bis using Jakub's fake groups.

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkysmk8ACgkQeiVVYja6o6MQRACfTOiHz0JwvJ5C1P2iaiMKXz7g
eS0An21yo8giW5uVR92mN+zeYwQFU3nK
=Qx3A
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-Add-option-to-limit-nested-groups.patch
Type: text/x-patch
Size: 4263 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101006/be9009ff/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-Handle-nested-groups-in-RFC2307bis.patch
Type: text/x-patch
Size: 27845 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101006/be9009ff/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-Add-option-to-limit-nested-groups.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101006/be9009ff/attachment.sig>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-Handle-nested-groups-in-RFC2307bis.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20101006/be9009ff/attachment-0001.sig>


More information about the sssd-devel mailing list