diff options
| author | Simo Sorce <ssorce@redhat.com> | 2011-11-20 20:50:27 -0500 |
|---|---|---|
| committer | Simo Sorce <ssorce@redhat.com> | 2011-12-08 17:18:10 -0500 |
| commit | 045c7c123eeb720173c19d5196b4fb5bb4cecbaa (patch) | |
| tree | 7d6040cb63334a685d555ce23b6d3baf827b57c2 /daemons/ipa-kdb/ipa_kdb_mspac.c | |
| parent | 7d744f82e2ae118216454214464847f4c218340c (diff) | |
| download | freeipa-045c7c123eeb720173c19d5196b4fb5bb4cecbaa.tar.gz freeipa-045c7c123eeb720173c19d5196b4fb5bb4cecbaa.tar.xz freeipa-045c7c123eeb720173c19d5196b4fb5bb4cecbaa.zip | |
ipa-kdb: enhance deref searches
Allow to deref more than one attribute.
The attrs searched are the same for all deref attributes at this time.
Diffstat (limited to 'daemons/ipa-kdb/ipa_kdb_mspac.c')
| -rw-r--r-- | daemons/ipa-kdb/ipa_kdb_mspac.c | 11 |
1 files changed, 9 insertions, 2 deletions
diff --git a/daemons/ipa-kdb/ipa_kdb_mspac.c b/daemons/ipa-kdb/ipa_kdb_mspac.c index 7b19611b3..8f4affa40 100644 --- a/daemons/ipa-kdb/ipa_kdb_mspac.c +++ b/daemons/ipa-kdb/ipa_kdb_mspac.c @@ -84,6 +84,11 @@ static char *user_pac_attrs[] = { NULL }; +char *deref_search_attrs[] = { + "memberOf", + NULL +}; + static char *memberof_pac_attrs[] = { "gidNumber", "ipaNTSecurityIdentifier", @@ -502,8 +507,10 @@ static krb5_error_code ipadb_get_pac(krb5_context kcontext, /* == Search PAC info == */ - kerr = ipadb_deref_search(ipactx, ied->entry_dn, user_pac_attrs, - "memberOf", memberof_pac_attrs, &results); + kerr = ipadb_deref_search(ipactx, ied->entry_dn, LDAP_SCOPE_BASE, + "(objectclass=*)", user_pac_attrs, + deref_search_attrs, memberof_pac_attrs, + &results); if (kerr) { goto done; } |