[SSSD] [PATCH] NSS: Print FQDN for groups with mixed domain membership

Sumit Bose sbose at redhat.com
Tue Oct 29 08:43:08 UTC 2013


On Mon, Oct 28, 2013 at 10:28:07PM +0100, Jakub Hrozek wrote:
> On Mon, Oct 28, 2013 at 10:20:24PM +0100, Sumit Bose wrote:
> > On Mon, Oct 28, 2013 at 04:55:17PM +0100, Jakub Hrozek wrote:
> > > Hi,
> > > 
> > > The first patch adds a unit test for getgrnam. I wanted to make sure we
> > > don't break anything this close to the 1.11.2 release.
> > > 
> > > The second patch is a workaround until
> > > https://fedorahosted.org/sssd/ticket/2129 is fixed properly.
> > > 
> > > Consider a group entry such as:
> > >  cn: subgroup at subdom
> > >  ghost: someuser
> > >  ghost: anotheruser at subdom
> > > 
> > > Currently in order to print all group members as FQDN (which is the default
> > > for AD provider), the code needs to iterate over the ghost attributes and
> > > parse them into (name,domain) and optionally re-add the domain.
> > > 
> > > The proper fix would be to store always just the FQDN in the hardcoded
> > > form of user at domain
> > 
> > sorry, but nss-srv-tests fails for me after applying the patch to master.
> > See http://paste.fedoraproject.org/50054/13829949/ for the short and
> > http://paste.fedoraproject.org/50056/29949861/ for the full debug
> > output.
> > 
> > bye,
> > Sumit
> 
> I should have explicitly said that these patches must be applied on top
> of those in "[PATCH] ad: support cross domain membership", do they still
> fail for you?

I'm sorry but yes. Am I missing any other patch? This is the top of the
branch I test with on a 32bit system:

d703220 NSS: Print FQDN for groups with mixed domain membership
de24e2d TEST: Test getgrnam with emphasis on members
bdd6b7e NSS: Fix parenthesis
267adcb LDAP: Check all search bases during nested group processing
b0fc582 nested groups: pick correct domain for cache lookups
0335a23 sdap_fill_memberships: pick correct domain for every member
1e3112f ghosts: pick correct domain for every member
8c6d1a4 sdap: add sdap_domain_get_by_dn()
c6360d8 sdap: store base dn in sdap_domain
3226d5b ad: shortcut if possible during get object by ID or SID
da34cf4 ad: destroy ptasks when subdomain is removed
44e8e96 ipa: destroy cleanup task when subdomain is removed

bye,
Sumit
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel



More information about the sssd-devel mailing list