[SSSD] [PATCH] NSS: invalidate memcache user entry on initgr, too
Simo Sorce
simo at redhat.com
Tue Jan 15 13:27:32 UTC 2013
On Tue, 2013-01-15 at 09:02 +0100, Jakub Hrozek wrote:
> https://fedorahosted.org/sssd/ticket/1757
>
> When the user entry was missing completely after initgroups, we would
> never invalidate the user entry from cache. This led to dangling cache
> entried in memory cache if the user was removed from the server while
> still being in memory cache.
0001: Why are we unconditionally deleting the user from the memory cache
even if just groups changed ?
0002: Please add a comment in be_initgroups_prereq() that the first id
it he user's primary gid and 'might' be duplicated later ?
Also why do we skip verifying the primary gid ?
Simo.
--
Simo Sorce * Red Hat, Inc * New York
More information about the sssd-devel
mailing list