[SSSD] [PATCH] ipa-server-mode: add IPA group memberships to AD users

Jakub Hrozek jhrozek at redhat.com
Mon Aug 26 15:20:21 UTC 2013


On Fri, Aug 23, 2013 at 03:44:09PM +0200, Sumit Bose wrote:
> Hi,
> 
> currently in ipa-server-mode only the AD groups memberships are
> available. This patch adds the IPA group memberships to trusted AD
> users.
> 
> This patch is missing some unit tests for some of the helper functions.
> I will send them later, but I didn't want to delay the next release.
> 
> bye,
> Sumit

I haven't done any testing yet but do we need the timeout? Since the
initgroups is a rare operation and on logins we generally want to have
the correct memberships, can we just rely on responder caching?



More information about the sssd-devel mailing list