diff options
| author | Sumit Bose <sbose@redhat.com> | 2015-04-28 17:20:05 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2015-05-06 11:05:20 +0200 |
| commit | 395219121cc05beb3592e74914a06e2b5b4ebb50 (patch) | |
| tree | efe7b6664c1c9a5e4fb1b296627e6986bdf380a7 /configure.ac | |
| parent | bfddefd70248d90a0478f4a406bfe40a94f2cd8d (diff) | |
| download | sssd-395219121cc05beb3592e74914a06e2b5b4ebb50.tar.gz sssd-395219121cc05beb3592e74914a06e2b5b4ebb50.tar.xz sssd-395219121cc05beb3592e74914a06e2b5b4ebb50.zip | |
IPA: update initgr expire timestamp conditionally
Newer versions of the extdom plugin return the full list of
group-memberships during user lookups. As a result the lifetime of the
group-membership data is updates in those cases. But if the user is not
looked up directly but is resolved as a group member during a group
lookup SSSD does not resolve all group-membership of the user to avoid
deep recursion and eventually a complete enumeration of the user and
group base. In this case the lifetime of the group-memberships should
not be updated because it might be incomplete.
Related to https://fedorahosted.org/sssd/ticket/2633
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
(cherry picked from commit cffe3135f29c737f2598f3c1384bfba1694fb843)
(cherry picked from commit f643fadbd072a9d3725f5f750340d5b13628ce6a)
Diffstat (limited to 'configure.ac')
0 files changed, 0 insertions, 0 deletions