[SSSD] [PATCHES] cleanup task: Expire all memberof targets when removing user

Michal Židek mzidek at redhat.com
Fri Aug 7 18:54:58 UTC 2015


Hi,

see the attached patches for ticket
https://fedorahosted.org/sssd/ticket/2676

Removing the user during cleanup task completely
removes that user from local database, so that
user is no longer part of any group in sysdb.

Such user may, or may not have been removed from
LDAP so the only way to figure out is check
on the next refresh otherwise we may get
inconsistent results.

The third patch adds integration test for this
Apply and run the intgcheck without the first 2
patches to see the failed test (you will also see that
all the tests after this failed one will end with
errors as well, that is probably due to incomplete
clean up after the ldap tests and I do not intend to
solve this as part of this patchset but will
investigate it later).

Thanks,
Michal
-- 
Senior Principal Intern
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-SYSDB-Add-function-to-expire-entry.patch
Type: text/x-patch
Size: 6204 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20150807/77785fa1/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-cleanup-task-Expire-all-memberof-targets-when-removi.patch
Type: text/x-patch
Size: 3780 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20150807/77785fa1/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-CI-Add-regression-test-for-2676.patch
Type: text/x-patch
Size: 2610 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20150807/77785fa1/attachment-0002.bin>


More information about the sssd-devel mailing list