[SSSD] [PATCH] SDAP: Relax POSIX check

Jakub Hrozek jhrozek at redhat.com
Wed Sep 23 20:57:08 UTC 2015


On Wed, Sep 23, 2015 at 09:26:53PM +0200, Pavel Březina wrote:
> On 09/22/2015 03:03 PM, Pavel Reichl wrote:
> >Hello,
> >
> >please see attached patch.
> >
> >Thanks!
> 
> Hi,
> 
> >-    state->filter = talloc_asprintf(state, "(|(%s=*)(%s=*))",
> >+    state->filter = talloc_asprintf(state,
> >+        "(|(&(%s=*)(objectclass=%s))(&(%s=*)(objectclass=%s)))",
> >                                     opts->user_map[SDAP_AT_USER_UID].name,
> >-                                    opts->group_map[SDAP_AT_GROUP_GID].name);
> >+                                    opts->user_map[SDAP_OC_USER].name,
> >+                                    opts->group_map[SDAP_AT_GROUP_GID].name,
> >+                                    opts->group_map[SDAP_OC_GROUP].name);
> 
> I don't understand, how it got relaxed? The original filter already tests
> only for presence of uid or gid. Or am I missing something?

I think the main point is the removal of "goto done" if str-to-num
failed.

That should have been spelled out in the commit message :-)


More information about the sssd-devel mailing list