[SSSD] [PATCHES] LDAP: Fix group handling with AD schema

Lukas Slebodnik lslebodn at redhat.com
Mon Jan 27 22:58:43 UTC 2014


On (27/01/14 17:49), Dmitri Pal wrote:
>On 01/27/2014 01:59 PM, Lukas Slebodnik wrote:
>> On (27/01/14 09:46), Lukas Slebodnik wrote:
>>> ehlo,
>>>
>>> two patches are attached.
>>> The 1st one is almost he same like patch:
>>> commit 16b27fcceebcbbaeefaf5b9bdf2dec3065adba4a
>>>    LDAP: Don't fail if subdomain cannot be found by sid
>>>
>>> I didn't notice that similar change was done in two separeted patches.
>>>
>>>
>>> I am not sure if 2nd is right solution, because some conditions are litle bit
>>> confusing for me.
>>>
>>> LS
>> Ticket https://fedorahosted.org/sssd/ticket/2172 was not solved completely,
>> because retrieving users works, but retrieving users doesn't work.
>
>EPARSE
>What exactly does not work?
>
One more time:
Ticket https://fedorahosted.org/sssd/ticket/2172 was not solved completely,
because retrieving users works, but retrieving groups doesn't work.

sorry for mistake :-)

>> Patches from previous mail should fix it.
>>
>> With configuration
>> id_provider = ldap
>> ldap_schema = ad
>> ldap_id_mapping = true
>>
>> BTW: 3 different patches broke retrieving groups between versions
>> sssd-1_10_0 and sssd-1_11_3. We should do review more careful if changes are in
>> generic ldap code.
>>
>> LS



More information about the sssd-devel mailing list