summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorStephen Gallagher <sgallagh@redhat.com>2011-02-14 14:59:18 -0500
committerStephen Gallagher <sgallagh@redhat.com>2011-02-19 10:10:03 -0500
commitc278de2fbf59f7cb187867484972dcb051a1ed97 (patch)
treed1d89a56788bbb8660bba717cdc0a284cdf4b20b
parentbb62ee68cc34041d7229247a86704960088efdae (diff)
downloadsssd-c278de2fbf59f7cb187867484972dcb051a1ed97.tar.gz
sssd-c278de2fbf59f7cb187867484972dcb051a1ed97.tar.xz
sssd-c278de2fbf59f7cb187867484972dcb051a1ed97.zip
Point the IPA provider at the compat tree for netgroups
We don't yet have support for IPA's internal representation of netgroups, so we need to use its compatibility mode for the time being.
-rw-r--r--src/providers/ipa/ipa_common.c19
1 files changed, 19 insertions, 0 deletions
diff --git a/src/providers/ipa/ipa_common.c b/src/providers/ipa/ipa_common.c
index 401c19305..c146735c7 100644
--- a/src/providers/ipa/ipa_common.c
+++ b/src/providers/ipa/ipa_common.c
@@ -372,12 +372,31 @@ int ipa_get_id_options(struct ipa_options *ipa_opts,
if (NULL == dp_opt_get_string(ipa_opts->id->basic,
SDAP_NETGROUP_SEARCH_BASE)) {
+#if 0
ret = dp_opt_set_string(ipa_opts->id->basic, SDAP_NETGROUP_SEARCH_BASE,
dp_opt_get_string(ipa_opts->id->basic,
SDAP_SEARCH_BASE));
if (ret != EOK) {
goto done;
}
+#else
+ /* We don't yet have support for the native representation
+ * of netgroups in IPA. For now, we need to point at the
+ * compat tree
+ */
+ value = talloc_asprintf(tmpctx, "cn=ng,cn=compat,%s", basedn);
+ if (!value) {
+ ret = ENOMEM;
+ goto done;
+ }
+
+ ret = dp_opt_set_string(ipa_opts->id->basic,
+ SDAP_NETGROUP_SEARCH_BASE,
+ value);
+ if (ret != EOK) {
+ goto done;
+ }
+#endif
DEBUG(6, ("Option %s set to %s\n",
ipa_opts->id->basic[SDAP_NETGROUP_SEARCH_BASE].opt_name,
dp_opt_get_string(ipa_opts->id->basic,