diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2012-11-25 22:25:37 +0100 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2012-12-06 11:54:27 +0100 |
| commit | cd37f5c77119c5a944602e8f4e65080444042711 (patch) | |
| tree | b92b7eb73441e9b2b8ced30dcbe5b2616687fd21 /m4 | |
| parent | 81097f8ea7e0ee3d9db10bfbc4a0bf76c716fc37 (diff) | |
| download | sssd-cd37f5c77119c5a944602e8f4e65080444042711.tar.gz sssd-cd37f5c77119c5a944602e8f4e65080444042711.tar.xz sssd-cd37f5c77119c5a944602e8f4e65080444042711.zip | |
MEMBEROF: Implement delete operation for ghost users
https://fedorahosted.org/sssd/ticket/1668
The memberof plugin did only expand the ghost users attribute to
parents when adding a nested group, but didn't implement the reverse
operation.
This bug resulted in users being reported as group members even
after the direct parent went away as the expanded ghost attributes were
never removed from the parent entry.
When a ghost entry is removed from a group, all its parent groups are
expired from the cache by setting the expire timestamp to 1. Doing so
would force the SSSD to re-read the group next time it is requested in
order to make sure its members are really up-to-date.
Diffstat (limited to 'm4')
0 files changed, 0 insertions, 0 deletions