[SSSD] [PATCHES] Alternative objectClass for group maps

Pavel Reichl preichl at redhat.com
Wed Sep 10 12:04:14 UTC 2014


Hello Michal,

code LGTM but I haven't tested it yet.

Could you add ticket number (https://fedorahosted.org/sssd/ticket/2436) 
to the patch?

Thanks,

Pavel


On 09/10/2014 01:23 PM, Michal Židek wrote:
> Hi,
>
> this patch should solve regression on IPA server
> triggered by the patches for this ticket:
> https://fedorahosted.org/sssd/ticket/2343
>
> Patches for #2343 solved the IPA side of the
> problem by searching for objectclass groupOfNames
> instead of posixGroup (which was not available in
> non-posix groups). But (as we discovered now) not
> all groups in IPA are members of the objectClass
> groupOfNames (the private groups created
> automatically for users are not, so as a result
> we were not able to query them). So there is
> no common objectclass for all groups in IPA that
> would be suitable for group query filters.
>
> So these 2 patches add the possibility to query
> groups using primary and alternative objectClass
> (ORed in the filter).
>
> I tested the patches, but I would feel safer if
> someone pushed them to Beaker and run QE tests
> on it before pushing (I thing Jakub volunteered
> for this task off-list :) ).
>
> Thank you,
> Michal
>
>
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20140910/edeaaf63/attachment.html>


More information about the sssd-devel mailing list