diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2014-09-08 11:49:40 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2014-09-08 19:18:19 +0200 |
| commit | ffe42e0158df6e4b2aad91e9a0cd75aff05be8c4 (patch) | |
| tree | 8036ecfd2dc078017ec7b88b60ca660c614ad42e /src/providers/ipa/ipa_id.c | |
| parent | 191d7f7ce3de10d9e19eaa0a6ab3319bcd4ca95d (diff) | |
| download | sssd-ffe42e0158df6e4b2aad91e9a0cd75aff05be8c4.tar.gz sssd-ffe42e0158df6e4b2aad91e9a0cd75aff05be8c4.tar.xz sssd-ffe42e0158df6e4b2aad91e9a0cd75aff05be8c4.zip | |
LDAP: Skip dereferenced entries that we are not permitted to read
https://fedorahosted.org/sssd/ticket/2421
In case we dereference an entry, for which we have /some/ permissions
for reading, but we only request attributes that we can't access, the
dereference control only returns the DN.
This is also the case with the current version of 389DS for cases where
no entries at all are readable. In this case, the server should not return
the DN at all, though. This DS bug was tracked as
https://fedorahosted.org/389/ticket/47885
Reviewed-by: Michal Židek <mzidek@redhat.com>
(cherry picked from commit 2284e50c801a53541016eb9a5af00d1250d36afb)
Diffstat (limited to 'src/providers/ipa/ipa_id.c')
0 files changed, 0 insertions, 0 deletions