diff options
| author | Stephen Gallagher <sgallagh@redhat.com> | 2012-02-16 09:26:33 -0500 |
|---|---|---|
| committer | Stephen Gallagher <sgallagh@redhat.com> | 2012-02-17 11:10:04 -0500 |
| commit | 42a3ceef28c4e3b629298efea00b57d41356a177 (patch) | |
| tree | 9ecd03dab6168b2c9a0385944345884324c21cea | |
| parent | ec9c64fd9c4400c845e525591ec4a978dd4e4abe (diff) | |
| download | sssd-42a3ceef28c4e3b629298efea00b57d41356a177.tar.gz sssd-42a3ceef28c4e3b629298efea00b57d41356a177.tar.xz sssd-42a3ceef28c4e3b629298efea00b57d41356a177.zip | |
LDAP: Ignore group member users that do not have name attributes
Instead of failing the group lookup, just skip them. This was
impacting some users of ActiveDirectory where not all users had
the appropriate attributes.
https://fedorahosted.org/sssd/ticket/1169
| -rw-r--r-- | src/providers/ldap/sdap_async_groups.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/providers/ldap/sdap_async_groups.c b/src/providers/ldap/sdap_async_groups.c index 061a99c8e..aefe35385 100644 --- a/src/providers/ldap/sdap_async_groups.c +++ b/src/providers/ldap/sdap_async_groups.c @@ -1685,8 +1685,8 @@ static errno_t sdap_nested_group_populate_users(struct sysdb_ctx *sysdb, opts->user_map[SDAP_AT_USER_NAME].name, &username); if (ret != EOK) { - DEBUG(1, ("User entry %d has no name attribute\n", i)); - goto done; + DEBUG(1, ("User entry %d has no name attribute. Skipping\n", i)); + continue; } ret = sysdb_attrs_get_el(users[i], SYSDB_ORIG_DN, &el); |