[SSSD] [PATCH]simple provider: Don't treat primary GID lookup failures as fatal

Simo Sorce ssorce at redhat.com
Mon Apr 25 20:00:13 UTC 2011


On Mon, 2011-04-25 at 15:35 -0400, Stephen Gallagher wrote:
> If the user's primary GID was not provided by the SSSD domain, we
> would
> throw an error and fail the access check.
> 
> This is not a security vulnerability, as it would never allow an
> unauthorized user access, it would only deny access to valid users.

Ack.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York




More information about the sssd-devel mailing list