[SSSD] [PATCHES] Fixes for sss_cache

Jakub Hrozek jhrozek at redhat.com
Wed Nov 27 13:50:35 UTC 2013


On Tue, Nov 26, 2013 at 11:51:41AM +0100, Sumit Bose wrote:
> Hi,
> 
> Steeve found some issues when testing sss_cache with sub-domain users.
> This was originally fixed in https://fedorahosted.org/sssd/ticket/1741
> but I guess recent changes have broken it again.
> 
> I have tested the patches with users and groups. It would be nice is
> someone with a suitable environment can test them for the other object
> types as well.
> 
> bye,
> Sumit

Hi,

during testing I found out that there is a difference in how we store
the nameAlias attribute for subdomain users retrieved with the exended
operation to IPA and subdomain users that are stored with the LDAP
provider.

The IPA subdomain users have lowercase the whole alias (so typically
user at windows.domain) while the LDAP users have only the name component
lowercased (user at WINDOWS.DOMAIN). Currently sss_cache only works with he
latter.

As discussed on IRC, we should pick on scheme and use it, ideally with
some helper function.



More information about the sssd-devel mailing list