[SSSD] [PATCH] IPA: use ipaUserGroup object class for groups

Jakub Hrozek jhrozek at redhat.com
Wed Nov 5 14:09:56 UTC 2014


On Wed, Nov 05, 2014 at 01:46:28PM +0100, Jakub Hrozek wrote:
> On Fri, Oct 31, 2014 at 02:36:54PM +0100, Pavel Březina wrote:
> > https://fedorahosted.org/sssd/ticket/2471
> > 
> > AFAIK all group object in IPA has ipaUserGroup object class so it should be
> > general enough to cover all type of groups but excluding roles.
> 
> > From cf85760923a112687bfbabbcc487851f627de73f Mon Sep 17 00:00:00 2001
> > From: =?UTF-8?q?Pavel=20B=C5=99ezina?= <pbrezina at redhat.com>
> > Date: Fri, 31 Oct 2014 14:26:30 +0100
> > Subject: [PATCH] IPA: use ipaUserGroup object class for groups
> > 
> > dfb34c6c82ed5014599bf70de6791e6d79106fc2 changed object class
> > of IPA groups from posixGroups to more general groupOfNames.
> > However, this object class is used also for roles, permissions and
> > privileges which caused SSSD to consider those objects to be groups as
> > well during initgroups.
> > 
> > Resolves:
> > https://fedorahosted.org/sssd/ticket/2471
> 
> POSIX, non-POSIX and user-private groups still work fine.
> 
> ACK

* master: 3937736546e2a4b7cccc58fded3efdff9ae690fc
* sssd-1-11: f070a93e7dd6b594d8652718e513a18ec389fc2c



More information about the sssd-devel mailing list