[SSSD] [PATCH] Fix simple access group control in case-insensitive domains

Jakub Hrozek jhrozek at redhat.com
Mon Apr 15 13:04:50 UTC 2013


On Mon, Apr 15, 2013 at 12:41:03PM +0200, Pavel Březina wrote:
> On 04/15/2013 11:34 AM, Jakub Hrozek wrote:
> >On Thu, Apr 11, 2013 at 09:23:53AM +0200, Jakub Hrozek wrote:
> >>https://fedorahosted.org/sssd/ticket/1713
> >>
> >>In the simple access provider, we need to only canonicalize user names when
> >>comparing with values in the ACL, not when searching the cache. The sysdb
> >>searches might do a base search with a DN constructed with the username
> >>which fails if the username is lower case.
> >
> >Bump. This is an important patch that needs review.
> 
> It's funny that the bug was fixed only by removing some code :)
> 
> There's invalid ticket link in the commit message.
> 
> Otherwise ack.

Pushed to master and after resolving a trivial conflict due to sysdb API
changes, also pushed to sssd-1-9.



More information about the sssd-devel mailing list