diff options
| author | Lukas Slebodnik <lslebodn@redhat.com> | 2015-07-13 10:40:06 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2015-08-05 11:28:37 +0200 |
| commit | dda0258705de7255e6ec54b7f9adbde83a220996 (patch) | |
| tree | e9297f3217292b192226586621922c927dd88d90 /BUILD.txt | |
| parent | a2c10cf31d14bac598f5cd008973375c3f9575a6 (diff) | |
| download | sssd-dda0258705de7255e6ec54b7f9adbde83a220996.tar.gz sssd-dda0258705de7255e6ec54b7f9adbde83a220996.tar.xz sssd-dda0258705de7255e6ec54b7f9adbde83a220996.zip | |
NSS: Initgr memory cache should work with fq names
We need to stored two versions of name to the initgroups memory cache.
Otherwise it could be stored many times if sssd is configured with
case_sensitive = false. It would be impossible to invalidate all
version of names after user login. As a result of this wrong user
groups could be returned from initgroups memory cache.
Therefore we store raw name provided by glibc function
and internal sanitized fully qualified name,
which is unique for particular user.
This patch also increase average space for initgroups
because there are also stored two quite long names in case of
fq names.
Resolves:
https://fedorahosted.org/sssd/ticket/2712
Reviewed-by: Michal Židek <mzidek@redhat.com>
Diffstat (limited to 'BUILD.txt')
0 files changed, 0 insertions, 0 deletions