diff options
| author | Sumit Bose <sbose@redhat.com> | 2015-05-07 11:16:54 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2015-05-15 11:22:51 +0200 |
| commit | 9db6a8a3ff686c56c2a269ff2fb12ddb7ae390da (patch) | |
| tree | 4ba8b39dcddfe486a2d72b8dab03bacb284574e4 | |
| parent | d76a0d61be887776a0999d3feda98edfa4acb5e2 (diff) | |
| download | sssd-9db6a8a3ff686c56c2a269ff2fb12ddb7ae390da.tar.gz sssd-9db6a8a3ff686c56c2a269ff2fb12ddb7ae390da.tar.xz sssd-9db6a8a3ff686c56c2a269ff2fb12ddb7ae390da.zip | |
IPA: do not fail if view name lookup failed on older versions
Depending on the version 389ds return a different error code if the
search for the view name failed because our dereference attribute
ipaAssignedIDView is not known. Newer version return
LDAP_UNAVAILABLE_CRITICAL_EXTENSION(12) which is translated to
EOPNOTSUPP and older versions return LDAP_PROTOCOL_ERROR(2) which is
returned as EIO. In both cases we have to assume that the server is not
view aware and keep the view name unset.
Resolves https://fedorahosted.org/sssd/ticket/2650
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
| -rw-r--r-- | src/providers/ipa/ipa_subdomains.c | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/src/providers/ipa/ipa_subdomains.c b/src/providers/ipa/ipa_subdomains.c index 0fe2a8dd6..44751e48c 100644 --- a/src/providers/ipa/ipa_subdomains.c +++ b/src/providers/ipa/ipa_subdomains.c @@ -1055,7 +1055,14 @@ static void ipa_get_view_name_done(struct tevent_req *req) ret = sdap_deref_search_with_filter_recv(req, ctx, &reply_count, &reply); talloc_zfree(req); if (ret != EOK) { - if (ret == EOPNOTSUPP) { + /* Depending on the version 389ds return a different error code if the + * search for the view name failed because our dereference attribute + * ipaAssignedIDView is not known. Newer version return + * LDAP_UNAVAILABLE_CRITICAL_EXTENSION(12) which is translated to + * EOPNOTSUPP and older versions return LDAP_PROTOCOL_ERROR(2) which + * is returned as EIO. In both cases we have to assume that the server + * is not view aware and keep the view name unset. */ + if (ret == EOPNOTSUPP || ret == EIO) { DEBUG(SSSDBG_TRACE_FUNC, "get_view_name request failed, looks " \ "like server does not support views.\n"); ret = ipa_check_master(ctx); |