diff options
| author | Nathan Kinder <nkinder@redhat.com> | 2010-07-09 10:23:51 -0700 |
|---|---|---|
| committer | Nathan Kinder <nkinder@redhat.com> | 2010-07-09 10:23:51 -0700 |
| commit | f1d509ec6f97fced6ad06b0fbe458444cd444825 (patch) | |
| tree | 984765b981c37de3aa75d5470a411a2c02ae998f /ldap/admin/src/scripts | |
| parent | e9a26dca776e3d812ae634fb6d3f2836499d7356 (diff) | |
| download | ds-f1d509ec6f97fced6ad06b0fbe458444cd444825.tar.gz ds-f1d509ec6f97fced6ad06b0fbe458444cd444825.tar.xz ds-f1d509ec6f97fced6ad06b0fbe458444cd444825.zip | |
Bug 612242 - membership change on DS does not show on AD
When a change was made to a DN mapped attribute in DS (such as
uniqueMember in a group entry), we may end up searching for the
entries that those values point to in AD when winsync is being
used. We were overwriting the "raw entry" pointer every time we
searched for an entry in AD. The raw entry is intended to point
to the entry that the original modification was made to, not the
entry that a DN mapped attribute value points to.
The fix is to add a flag that will force the raw entry to be kept
when we search for an entry in AD. We set this flag when we search
for entries that are pointed to be DN mapped attribute values and
reset it when we are finished. This results in the raw entry being
the actual entry that is the target of the operation we are syncing.
Diffstat (limited to 'ldap/admin/src/scripts')
0 files changed, 0 insertions, 0 deletions