[SSSD] [PATCH] ad: store group in correct tree on initgroups via tokenGroups

Jakub Hrozek jhrozek at redhat.com
Tue Sep 17 13:43:21 UTC 2013


On Fri, Sep 06, 2013 at 02:30:54PM +0200, Pavel Březina wrote:
> https://fedorahosted.org/sssd/ticket/2066
> 
> Please note, that these patches has to be applied atop
> 0004-util-add-find_subdomain_by_sid.patch from my simple provider
> patches. You can also pull it from branch ad-groups at my fedorapeople repo.
> 
> I still don't know why AD returns Domain Users from root domain in
> tokenGroups, even though subaduser is not member of DU at ad.pb (AD bug
> perhaps?), but with these patches we store it correctly.
> 
> This should be also a step forward to #2064.

Sorry for the long delay in reviews. Can you rebase patch #4 on your
latest simple access provider patches?



More information about the sssd-devel mailing list