[SSSD] [PATCH] sdap_domain_add: remove too strict consistency check
Sumit Bose
sbose at redhat.com
Fri Sep 20 11:49:08 UTC 2013
Hi,
without the following patch member domains in a trusted forest cannot be
properly initialized in the IPA provider.
bye,
Sumit
-------------- next part --------------
From 35722c67bd26f22b03c310b318873a7885b3f042 Mon Sep 17 00:00:00 2001
From: Sumit Bose <sbose at redhat.com>
Date: Thu, 12 Sep 2013 12:03:35 +0200
Subject: [PATCH] sdap_domain_add: remove too strict consistency check
The check worked for simple setups but fails e.g. in environment with
trusts.
---
src/providers/ldap/ldap_common.c | 10 ----------
1 files changed, 0 insertions(+), 10 deletions(-)
diff --git a/src/providers/ldap/ldap_common.c b/src/providers/ldap/ldap_common.c
index b668a48..89786fa 100644
--- a/src/providers/ldap/ldap_common.c
+++ b/src/providers/ldap/ldap_common.c
@@ -77,16 +77,6 @@ sdap_domain_add(struct sdap_options *opts,
sdom->dom = dom;
sdom->head = &opts->sdom;
- if (opts->sdom) {
- /* Only allow subdomains of the parent domain */
- if (dom->parent == NULL ||
- dom->parent != opts->sdom->dom) {
- DEBUG(SSSDBG_OP_FAILURE, ("Domain %s is not a subdomain of %s\n",
- dom->name, opts->sdom->dom->name));
- return EINVAL;
- }
- }
-
talloc_set_destructor((TALLOC_CTX *)sdom, sdap_domain_destructor);
DLIST_ADD_END(opts->sdom, sdom, struct sdap_domain *);
--
1.7.7.6
More information about the sssd-devel
mailing list