[SSSD] [PATCH] LDAP: Delete entry by SID if not found

Jakub Hrozek jhrozek at redhat.com
Tue Oct 15 16:08:18 UTC 2013


On Fri, Oct 11, 2013 at 11:01:32AM +0200, Pavel Březina wrote:
> On 10/10/2013 08:13 PM, Jakub Hrozek wrote:
> >Hi,
> >
> >if an entry is removed from LDAP and searched by SID, the SID lookup
> >code doesn't handle ENOENT and doesn't remove the stray entry from
> >cache. The attached patch fixes that.
> 
> Hi,
> how does this cope with situation when the deleted object is a
> member of some groups?

The memberof plugin should kick in and remove the user from the groups.

I haven't tested this, because it's should be no different from removing
a user who is a member of a group, but I will run a quick test before
submitting the next patch.



More information about the sssd-devel mailing list