[SSSD] [PATCH] NSS: Print FQDN for groups with mixed domain membership

Jakub Hrozek jhrozek at redhat.com
Mon Oct 28 21:28:07 UTC 2013


On Mon, Oct 28, 2013 at 10:20:24PM +0100, Sumit Bose wrote:
> On Mon, Oct 28, 2013 at 04:55:17PM +0100, Jakub Hrozek wrote:
> > Hi,
> > 
> > The first patch adds a unit test for getgrnam. I wanted to make sure we
> > don't break anything this close to the 1.11.2 release.
> > 
> > The second patch is a workaround until
> > https://fedorahosted.org/sssd/ticket/2129 is fixed properly.
> > 
> > Consider a group entry such as:
> >  cn: subgroup at subdom
> >  ghost: someuser
> >  ghost: anotheruser at subdom
> > 
> > Currently in order to print all group members as FQDN (which is the default
> > for AD provider), the code needs to iterate over the ghost attributes and
> > parse them into (name,domain) and optionally re-add the domain.
> > 
> > The proper fix would be to store always just the FQDN in the hardcoded
> > form of user at domain
> 
> sorry, but nss-srv-tests fails for me after applying the patch to master.
> See http://paste.fedoraproject.org/50054/13829949/ for the short and
> http://paste.fedoraproject.org/50056/29949861/ for the full debug
> output.
> 
> bye,
> Sumit

I should have explicitly said that these patches must be applied on top
of those in "[PATCH] ad: support cross domain membership", do they still
fail for you?



More information about the sssd-devel mailing list