diff options
| author | Sumit Bose <sbose@redhat.com> | 2015-05-07 11:16:54 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2015-05-12 11:17:38 +0200 |
| commit | a50b229c8ea1e22c9efa677760b94d8c48c3ec89 (patch) | |
| tree | 7e38807c1cdad12a82b8594344e767335a77ff53 | |
| parent | 305267064a9d8c86536fcd5c92c1c9cb3e7df268 (diff) | |
| download | sssd-a50b229c8ea1e22c9efa677760b94d8c48c3ec89.tar.gz sssd-a50b229c8ea1e22c9efa677760b94d8c48c3ec89.tar.xz sssd-a50b229c8ea1e22c9efa677760b94d8c48c3ec89.zip | |
IPA: do not fail if view name lookup failed on older versions
Depending on the version 389ds return a different error code if the
search for the view name failed because our dereference attribute
ipaAssignedIDView is not known. Newer version return
LDAP_UNAVAILABLE_CRITICAL_EXTENSION(12) which is translated to
EOPNOTSUPP and older versions return LDAP_PROTOCOL_ERROR(2) which is
returned as EIO. In both cases we have to assume that the server is not
view aware and keep the view name unset.
Resolves https://fedorahosted.org/sssd/ticket/2650
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
| -rw-r--r-- | src/providers/ipa/ipa_subdomains.c | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/src/providers/ipa/ipa_subdomains.c b/src/providers/ipa/ipa_subdomains.c index 20657ebb5..f863b806c 100644 --- a/src/providers/ipa/ipa_subdomains.c +++ b/src/providers/ipa/ipa_subdomains.c @@ -1034,7 +1034,14 @@ static void ipa_get_view_name_done(struct tevent_req *req) ret = sdap_deref_search_with_filter_recv(req, ctx, &reply_count, &reply); talloc_zfree(req); if (ret != EOK) { - if (ret == EOPNOTSUPP) { + /* Depending on the version 389ds return a different error code if the + * search for the view name failed because our dereference attribute + * ipaAssignedIDView is not known. Newer version return + * LDAP_UNAVAILABLE_CRITICAL_EXTENSION(12) which is translated to + * EOPNOTSUPP and older versions return LDAP_PROTOCOL_ERROR(2) which + * is returned as EIO. In both cases we have to assume that the server + * is not view aware and keep the view name unset. */ + if (ret == EOPNOTSUPP || ret == EIO) { DEBUG(SSSDBG_TRACE_FUNC, "get_view_name request failed, looks " \ "like server does not support views.\n"); ret = ipa_check_master(ctx); |