[SSSD] [PATCHES] nss: Add original DN and memberOf to origbyname request

Jakub Hrozek jhrozek at redhat.com
Tue Jan 20 19:01:11 UTC 2015


On Tue, Jan 20, 2015 at 05:01:07PM +0100, Jakub Hrozek wrote:
> On Tue, Jan 20, 2015 at 04:05:08PM +0100, Jakub Hrozek wrote:
> > On Tue, Jan 20, 2015 at 01:59:48PM +0100, Sumit Bose wrote:
> > > Hi,
> > > 
> > > The original values of memberOf and the original DN are used in the HBAC
> > > evaluation and should be send to the IPA client for AD users via the
> > > extdom plugin. The attached patches adds those attribute to the response
> > > of of the getorig request. No changes in the extdom plugin are needed.
> > > 
> > > Since originalMemberOf is a multi-value attribute fill_orig() must be
> > > able to handle multi-value attributes. The first patch adds the needed
> > > changes while the second refactors fill_orig() a bit. To make reviewing
> > > easier I didn't squash them together. The last patch adds the new
> > > attributes to the getorig request.
> > > 
> > > bye,
> > > Sumit
> > 
> > The patches work well in my testing. I've submitted them for automated
> > tests. See two questions inline:
> 
> btw the tests went fine (sans some problems we have with RHEL-6 test
> machine), so I'm inclined to give my ACK.

Pushed to master:
    * 7543052f562f157f7b17fdc46a6777d80c0cb3bd
    * a4d64002b5ca763622bde240d27797d361ba0388
    * 5f4d896ec8e06476f4282b562b1044de14c48ecf
sssd-1-12:
    * dcc99fc87bc7ec44fdc8ec897218384cc274d4dd
    * 2eb78055d7a344c0ef58adbaa84dac86df13174e
    * 70ec6df14be2ddc26147095e260b4f9c7e606a6b



More information about the sssd-devel mailing list