[SSSD] [PATCH] IPA: use ipaUserGroup object class for groups
Jakub Hrozek
jhrozek at redhat.com
Wed Nov 5 12:46:28 UTC 2014
On Fri, Oct 31, 2014 at 02:36:54PM +0100, Pavel Březina wrote:
> https://fedorahosted.org/sssd/ticket/2471
>
> AFAIK all group object in IPA has ipaUserGroup object class so it should be
> general enough to cover all type of groups but excluding roles.
> From cf85760923a112687bfbabbcc487851f627de73f Mon Sep 17 00:00:00 2001
> From: =?UTF-8?q?Pavel=20B=C5=99ezina?= <pbrezina at redhat.com>
> Date: Fri, 31 Oct 2014 14:26:30 +0100
> Subject: [PATCH] IPA: use ipaUserGroup object class for groups
>
> dfb34c6c82ed5014599bf70de6791e6d79106fc2 changed object class
> of IPA groups from posixGroups to more general groupOfNames.
> However, this object class is used also for roles, permissions and
> privileges which caused SSSD to consider those objects to be groups as
> well during initgroups.
>
> Resolves:
> https://fedorahosted.org/sssd/ticket/2471
POSIX, non-POSIX and user-private groups still work fine.
ACK
> ---
> src/providers/ipa/ipa_opts.h | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/src/providers/ipa/ipa_opts.h b/src/providers/ipa/ipa_opts.h
> index 4785e0164bf6d9efb574a8703b573f4e8086cab6..0e0eed49cd397fe88ce7bf41579c066088947d04 100644
> --- a/src/providers/ipa/ipa_opts.h
> +++ b/src/providers/ipa/ipa_opts.h
> @@ -205,7 +205,7 @@ struct sdap_attr_map ipa_user_map[] = {
> };
>
> struct sdap_attr_map ipa_group_map[] = {
> - { "ldap_group_object_class", "groupOfNames", SYSDB_GROUP_CLASS, NULL },
> + { "ldap_group_object_class", "ipaUserGroup", SYSDB_GROUP_CLASS, NULL },
> { "ldap_group_object_class_alt", "posixGroup", SYSDB_GROUP_CLASS, NULL },
> { "ldap_group_name", "cn", SYSDB_NAME, NULL },
> { "ldap_group_pwd", "userPassword", SYSDB_PWD, NULL },
> --
> 1.7.11.7
>
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
More information about the sssd-devel
mailing list