diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2013-10-08 17:50:56 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2013-10-25 22:04:11 +0200 |
| commit | 2cbf205f3fe25087666ff108c2ad380fd3cbfe46 (patch) | |
| tree | a2007f593e2b5ecc29db4cd909cb921a21c6b068 /src/providers/ad/ad_access.h | |
| parent | 9dd62f094fb4c1bfb04128de1c3ec20933603046 (diff) | |
| download | sssd-2cbf205f3fe25087666ff108c2ad380fd3cbfe46.tar.gz sssd-2cbf205f3fe25087666ff108c2ad380fd3cbfe46.tar.xz sssd-2cbf205f3fe25087666ff108c2ad380fd3cbfe46.zip | |
AD: Search GC by default during access control, fall back to LDAP
Resolves:
https://fedorahosted.org/sssd/ticket/2082
In order to allow the ad_access_filter option to work for subdomain
users as well, the Global Catalog must be searched. This patch adds a
wrapper request atop sdap_access_send that selects the right connection
(GC or LDAP) and optionally falls back to LDAP.
Diffstat (limited to 'src/providers/ad/ad_access.h')
| -rw-r--r-- | src/providers/ad/ad_access.h | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/providers/ad/ad_access.h b/src/providers/ad/ad_access.h index 62259265d..ca5e69729 100644 --- a/src/providers/ad/ad_access.h +++ b/src/providers/ad/ad_access.h @@ -24,9 +24,11 @@ #define AD_ACCESS_H_ struct ad_access_ctx { - struct sdap_id_ctx *sdap_ctx; struct dp_option *ad_options; struct sdap_access_ctx *sdap_access_ctx; + + struct sdap_id_conn_ctx *ldap_ctx; + struct sdap_id_conn_ctx *gc_ctx; }; void |