[SSSD] [PATCHES] Fix two serious issues with initgroups

Stephen Gallagher sgallagh at redhat.com
Mon Sep 13 15:48:29 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[PATCH 1/2] Initgroups on a non-cached user should go to the data provider

We were accidentally returning an error when sysdb_getpwnam()
returned zero results internally in sysdb_initgroups(). The
correct behavior here is to return EOK and a result object with
zero entries.

https://fedorahosted.org/sssd/ticket/620



[PATCH 2/2] Request all group attributes during initgroups processing

We tried to be too clever and only requested the name of the group,
but we require the objectClass to validate the results.

https://fedorahosted.org/sssd/ticket/622

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkyOR80ACgkQeiVVYja6o6OyTACeN+FQCO8kLEeWBdyedOc2x8DK
H8wAn0fccxqM0ps2IU8vUNJhMzvA6jtC
=iOXA
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Initgroups-on-a-non-cached-user-should-go-to-the-dat.patch
Type: text/x-patch
Size: 2811 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100913/278de427/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-Request-all-group-attributes-during-initgroups-proce.patch
Type: text/x-patch
Size: 2259 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100913/278de427/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Initgroups-on-a-non-cached-user-should-go-to-the-dat.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100913/278de427/attachment.sig>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-Request-all-group-attributes-during-initgroups-proce.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100913/278de427/attachment-0001.sig>


More information about the sssd-devel mailing list