[SSSD] [PATCH] Get the RootDSE after binding if not successfull before

Jakub Hrozek jhrozek at redhat.com
Fri Apr 20 15:55:38 UTC 2012


On Fri, Apr 20, 2012 at 04:58:31PM +0200, Jakub Hrozek wrote:
> https://fedorahosted.org/sssd/ticket/1258
> 
> The ticket mentioned that ID lookups were failing..I didn't reproduce
> that, I only reproduced that dereference was not available if rootDSE
> was not read.

As Stephen explained on IRC, the problem is that HBAC uses dereference
unconditionally and the access check fails if we are not able to
dereference host info.

I've tested that with the patch applied, HBAC works fine even when
anonymous binds are disabled and fails without the patch.



More information about the sssd-devel mailing list