[SSSD] [PATCH]simple provider: Don't treat primary GID lookup failures as fatal

Stephen Gallagher sgallagh at redhat.com
Wed Apr 27 16:32:39 UTC 2011


On Mon, 2011-04-25 at 16:00 -0400, Simo Sorce wrote:
> On Mon, 2011-04-25 at 15:35 -0400, Stephen Gallagher wrote:
> > If the user's primary GID was not provided by the SSSD domain, we
> > would
> > throw an error and fail the access check.
> > 
> > This is not a security vulnerability, as it would never allow an
> > unauthorized user access, it would only deny access to valid users.
> 
> Ack.


Pushed to master.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110427/d8ac173b/attachment.sig>


More information about the sssd-devel mailing list