[SSSD] [PATCH] LDAP: retain external members

Sumit Bose sbose at redhat.com
Mon Dec 15 15:36:46 UTC 2014


On Sat, Dec 13, 2014 at 10:25:55PM +0100, Jakub Hrozek wrote:
> On Sat, Dec 13, 2014 at 10:17:09PM +0100, Jakub Hrozek wrote:
> > On Fri, Dec 12, 2014 at 05:19:00PM +0100, Sumit Bose wrote:
> > > ACK
> > > 
> > > bye,
> > > Sumit
> > 
> > master: 6fac5e5f0c54a0f92872ce1450606cfcb577a920
> 
> reviewers, if you think it makes sense to push this patch to sssd-1-11
> as well, please holler.
> 
> I personally don't -- this bug seems mostly be related to the server
> mode and for IPA server side SSSD it just makes sense to go with
> sssd-1-12.

I think the patch is valid on 1.11 IPA clients as well because it makes
sure that members of IPA groups which are  added from a different
source, e.g. the PAC responder, are not removed if the group expires and
is updated with data from the IPA LDAP group object, which does not
contain the external users as members.

So if there are issue on 1.11 where IPA group memberships of AD users
get lost this patch might help here as well.

bye,
Sumit
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel



More information about the sssd-devel mailing list