diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2011-06-13 14:54:42 -0400 |
|---|---|---|
| committer | Endi S. Dewata <edewata@redhat.com> | 2011-06-14 15:34:11 +0000 |
| commit | c5d8618424de3766db9f104d0873c884b53a4feb (patch) | |
| tree | 9aa85a0a886585510ca9da751f06638c4daf5ece /install | |
| parent | 9f72637b13c2001d1c7e8842f75347f9af74190e (diff) | |
| download | freeipa-c5d8618424de3766db9f104d0873c884b53a4feb.tar.gz freeipa-c5d8618424de3766db9f104d0873c884b53a4feb.tar.xz freeipa-c5d8618424de3766db9f104d0873c884b53a4feb.zip | |
Fix indirect member calculation
Indirect membership is calculated by looking at each member and pulling
all the memberof out of it. What was missing was doing nested searches
on any members in that member group.
So if group2 was a member of group1 and group3 was a member of group2
we would miss group3 as being an indirect member of group1.
I updated the nesting test to do deeper nested testing. I confirmed
that this test failed with the old code and works with the new.
This also prevents duplicate indirect users and looping on circular
membership.
ticket https://fedorahosted.org/freeipa/ticket/1273
Diffstat (limited to 'install')
0 files changed, 0 insertions, 0 deletions