path: root/
diff options
authorSumit Bose <>2013-12-18 13:47:31 +0100
committerJakub Hrozek <>2013-12-19 17:36:09 +0100
commit4cd1cb275a09a188dce1eeccecc868a854a13b77 (patch)
treef994ea5f9ea10236037b8fdfb9d83fdc66083f9a /
parentb61518461e08ba0e33ffd6c0c47da709a5757658 (diff)
AD: cross-domain membership fix
A recent patch directed all call related to group membership lookups to the AD LDAP port to fix an issue related to missing group memberships in the Global Catalog. As a side-effect it broke cross-domain group-memberships because those cannot be resolved by the connection to the LDAP port. The patch tires to fix this by restoring the original behaviour in the top-level lookup calls in the AD provider and switching to the LDAP port only for the LDAP request which is expected to return the full group membership. Additionally this patch contains a related fix for the tokenGroups with Posix attributes patch. The original connection, typically a Global Catalog connection in the AD case is passed down the stack so that the group lookup after the tokenGroups request can run over the same connection.
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions