[SSSD] [PATCH] sdap_domain_add: remove too strict consistency check

Sumit Bose sbose at redhat.com
Fri Sep 20 11:49:08 UTC 2013


Hi,

without the following patch member domains in a trusted forest cannot be
properly initialized in the IPA provider.

bye,
Sumit
-------------- next part --------------
From 35722c67bd26f22b03c310b318873a7885b3f042 Mon Sep 17 00:00:00 2001
From: Sumit Bose <sbose at redhat.com>
Date: Thu, 12 Sep 2013 12:03:35 +0200
Subject: [PATCH] sdap_domain_add: remove too strict consistency check

The check worked for simple setups but fails e.g. in environment with
trusts.
---
 src/providers/ldap/ldap_common.c |   10 ----------
 1 files changed, 0 insertions(+), 10 deletions(-)

diff --git a/src/providers/ldap/ldap_common.c b/src/providers/ldap/ldap_common.c
index b668a48..89786fa 100644
--- a/src/providers/ldap/ldap_common.c
+++ b/src/providers/ldap/ldap_common.c
@@ -77,16 +77,6 @@ sdap_domain_add(struct sdap_options *opts,
     sdom->dom = dom;
     sdom->head = &opts->sdom;
 
-    if (opts->sdom) {
-        /* Only allow subdomains of the parent domain */
-        if (dom->parent == NULL ||
-            dom->parent != opts->sdom->dom) {
-            DEBUG(SSSDBG_OP_FAILURE, ("Domain %s is not a subdomain of %s\n",
-                  dom->name, opts->sdom->dom->name));
-            return EINVAL;
-        }
-    }
-
     talloc_set_destructor((TALLOC_CTX *)sdom, sdap_domain_destructor);
     DLIST_ADD_END(opts->sdom, sdom, struct sdap_domain *);
 
-- 
1.7.7.6



More information about the sssd-devel mailing list