[SSSD] [PATCH] ipa-server-mode: add IPA group memberships to AD users
Jakub Hrozek
jhrozek at redhat.com
Mon Aug 26 15:20:21 UTC 2013
On Fri, Aug 23, 2013 at 03:44:09PM +0200, Sumit Bose wrote:
> Hi,
>
> currently in ipa-server-mode only the AD groups memberships are
> available. This patch adds the IPA group memberships to trusted AD
> users.
>
> This patch is missing some unit tests for some of the helper functions.
> I will send them later, but I didn't want to delay the next release.
>
> bye,
> Sumit
I haven't done any testing yet but do we need the timeout? Since the
initgroups is a rare operation and on logins we generally want to have
the correct memberships, can we just rely on responder caching?
More information about the sssd-devel
mailing list