[SSSD] [PATCH] SDAP: Relax POSIX check
Pavel Březina
pbrezina at redhat.com
Wed Sep 23 19:26:53 UTC 2015
On 09/22/2015 03:03 PM, Pavel Reichl wrote:
> Hello,
>
> please see attached patch.
>
> Thanks!
Hi,
> - state->filter = talloc_asprintf(state, "(|(%s=*)(%s=*))",
> + state->filter = talloc_asprintf(state,
> + "(|(&(%s=*)(objectclass=%s))(&(%s=*)(objectclass=%s)))",
> opts->user_map[SDAP_AT_USER_UID].name,
> - opts->group_map[SDAP_AT_GROUP_GID].name);
> + opts->user_map[SDAP_OC_USER].name,
> + opts->group_map[SDAP_AT_GROUP_GID].name,
> + opts->group_map[SDAP_OC_GROUP].name);
I don't understand, how it got relaxed? The original filter already
tests only for presence of uid or gid. Or am I missing something?
More information about the sssd-devel
mailing list