diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2013-10-08 17:50:56 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2013-10-25 21:02:43 +0200 |
| commit | 67b1fc914190e12ab014c0616b7f0a642fbe6356 (patch) | |
| tree | 1a3975156760ac8c83d98ab6220d3e27f5a1770b /src/providers/ad/ad_access.h | |
| parent | efe6b4a9d374339cac2528cdeb43720957c6b7c9 (diff) | |
| download | sssd-67b1fc914190e12ab014c0616b7f0a642fbe6356.tar.gz sssd-67b1fc914190e12ab014c0616b7f0a642fbe6356.tar.xz sssd-67b1fc914190e12ab014c0616b7f0a642fbe6356.zip | |
AD: Search GC by default during access control, fall back to LDAP
Resolves:
https://fedorahosted.org/sssd/ticket/2082
In order to allow the ad_access_filter option to work for subdomain
users as well, the Global Catalog must be searched. This patch adds a
wrapper request atop sdap_access_send that selects the right connection
(GC or LDAP) and optionally falls back to LDAP.
Diffstat (limited to 'src/providers/ad/ad_access.h')
| -rw-r--r-- | src/providers/ad/ad_access.h | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/providers/ad/ad_access.h b/src/providers/ad/ad_access.h index 62259265d..ca5e69729 100644 --- a/src/providers/ad/ad_access.h +++ b/src/providers/ad/ad_access.h @@ -24,9 +24,11 @@ #define AD_ACCESS_H_ struct ad_access_ctx { - struct sdap_id_ctx *sdap_ctx; struct dp_option *ad_options; struct sdap_access_ctx *sdap_access_ctx; + + struct sdap_id_conn_ctx *ldap_ctx; + struct sdap_id_conn_ctx *gc_ctx; }; void |