[SSSD] [PATCH] IPA: use ipaUserGroup object class for groups

Jakub Hrozek jhrozek at redhat.com
Wed Nov 5 12:46:28 UTC 2014


On Fri, Oct 31, 2014 at 02:36:54PM +0100, Pavel Březina wrote:
> https://fedorahosted.org/sssd/ticket/2471
> 
> AFAIK all group object in IPA has ipaUserGroup object class so it should be
> general enough to cover all type of groups but excluding roles.

> From cf85760923a112687bfbabbcc487851f627de73f Mon Sep 17 00:00:00 2001
> From: =?UTF-8?q?Pavel=20B=C5=99ezina?= <pbrezina at redhat.com>
> Date: Fri, 31 Oct 2014 14:26:30 +0100
> Subject: [PATCH] IPA: use ipaUserGroup object class for groups
> 
> dfb34c6c82ed5014599bf70de6791e6d79106fc2 changed object class
> of IPA groups from posixGroups to more general groupOfNames.
> However, this object class is used also for roles, permissions and
> privileges which caused SSSD to consider those objects to be groups as
> well during initgroups.
> 
> Resolves:
> https://fedorahosted.org/sssd/ticket/2471

POSIX, non-POSIX and user-private groups still work fine.

ACK

> ---
>  src/providers/ipa/ipa_opts.h | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/src/providers/ipa/ipa_opts.h b/src/providers/ipa/ipa_opts.h
> index 4785e0164bf6d9efb574a8703b573f4e8086cab6..0e0eed49cd397fe88ce7bf41579c066088947d04 100644
> --- a/src/providers/ipa/ipa_opts.h
> +++ b/src/providers/ipa/ipa_opts.h
> @@ -205,7 +205,7 @@ struct sdap_attr_map ipa_user_map[] = {
>  };
>  
>  struct sdap_attr_map ipa_group_map[] = {
> -    { "ldap_group_object_class", "groupOfNames", SYSDB_GROUP_CLASS, NULL },
> +    { "ldap_group_object_class", "ipaUserGroup", SYSDB_GROUP_CLASS, NULL },
>      { "ldap_group_object_class_alt", "posixGroup", SYSDB_GROUP_CLASS, NULL },
>      { "ldap_group_name", "cn", SYSDB_NAME, NULL },
>      { "ldap_group_pwd", "userPassword", SYSDB_PWD, NULL },
> -- 
> 1.7.11.7
> 

> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel




More information about the sssd-devel mailing list