[SSSD] Fix #2275 nested netgroups do not work in IPA provider

Jakub Hrozek jhrozek at redhat.com
Thu Sep 3 08:27:30 UTC 2015


On Thu, Sep 03, 2015 at 09:54:51AM +0200, Jakub Hrozek wrote:
> On Thu, Sep 03, 2015 at 09:31:07AM +0200, Petr Cech wrote:
> > On 09/03/2015 08:18 AM, Jakub Hrozek wrote:
> > >On Thu, Sep 03, 2015 at 06:15:24AM +0200, Lukas Slebodnik wrote:
> > >>On (02/09/15 18:06), Petr Cech wrote:
> > >>>Hi,
> > >>>
> > >>>reverting this commit "5e9bc89b28f1ac3ce573ecdece74fe9623580c28" fixed the
> > >>>problem for me. So is the original commit no longer valid?
> > >>>
> > >>I'm little bit worried about reverting this patch.
> > >>Did you test the bug which was fixed by this commit.
> > >>@see https://fedorahosted.org/sssd/ticket/1519
> > Thanks.
> > 
> > Tested. We need both patches (because user groups are in memberOf and host
> > groups are in orig_memberOf).
> > Simple, I will do it.
> > 
> > Is it OK that freeIPA use two kind of memberOf?
> 
> It does not. In FreeIPA LDAP there should only be memberOf (check it
> out with openldap). What is happening is that we internally store IPA's
           ~~~~~~~~
        sorry I meany ldapsearch here.
> memberof value as originalMemberOf and our memberof points to cached
> objects.
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel


More information about the sssd-devel mailing list