[SSSD] [PATCH] Fix an issue in ghost users

Jan Zelený jzeleny at redhat.com
Wed Jun 13 14:28:54 UTC 2012


> On Wed, 2012-06-13 at 11:32 +0200, Jan Zelený wrote:
> > There was an issue with ghost members in nested groups. Consider a
> > scenario with two groups A and B, B being member of A and having some
> > ghost members. In such case SSSD stored both groups, then added
> > membership between them and then added ghost members to the group B.
> > 
> > The problem was that adding ghost members to group B didn't propagate
> > these ghost members to group A. This functionality could have been
> > solved by memberof plugin but the logic is far more complicated that
> > changes this patch introduces.
> > 
> > The change is simple: add ghost members at the same time as the group is
> > created, even if groups are supposed to be stored in two passes. That
> > way ghost members will be present at the time A -> B membership is
> > created and they will be propagated as expected.
> > 
> > I've tested this with plain RFC2307bis and IPA schema, more tests are
> > welcomed.
> 
> In general, I think this would be better handled by the memberOf plugin,
> but I see the difficulty with doing that. Jan, please open a ticket to
> move this functionality into memberOf some time in the nebulous future.

The ticket is here:
https://fedorahosted.org/sssd/ticket/1375

Thanks
Jan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120613/a29bd355/attachment.sig>


More information about the sssd-devel mailing list