diff options
| author | Sumit Bose <sbose@redhat.com> | 2015-04-28 17:18:48 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2015-05-05 16:02:30 +0200 |
| commit | e87badc0f6fb20a443cf12bde9582ecbc2aef727 (patch) | |
| tree | 2b9addd71f81b414f9f3493b7a96d0d03da6afca /src/providers/ipa/ipa_subdomains.h | |
| parent | 56552c518a07b45b25d4a2ef58d37fac0918ce60 (diff) | |
| download | sssd-e87badc0f6fb20a443cf12bde9582ecbc2aef727.tar.gz sssd-e87badc0f6fb20a443cf12bde9582ecbc2aef727.tar.xz sssd-e87badc0f6fb20a443cf12bde9582ecbc2aef727.zip | |
IPA: do initgroups if extdom exop supports it
Newer versions of the extdom plugin return the full list of
group-memberships during a user lookup request. With these version there
is no need to reject a initgroups request for sub/trusted-domain users
anymore. This is e.g. useful for callers which call getgrouplist()
directly without calling getpwnam() before. Additionally it helps if for
some reasons the lifetime of the user entry and the lifetime of the
initgroups data is different.
Related to https://fedorahosted.org/sssd/ticket/2633
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
Diffstat (limited to 'src/providers/ipa/ipa_subdomains.h')
| -rw-r--r-- | src/providers/ipa/ipa_subdomains.h | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/providers/ipa/ipa_subdomains.h b/src/providers/ipa/ipa_subdomains.h index 5266943f8..0cece2cc7 100644 --- a/src/providers/ipa/ipa_subdomains.h +++ b/src/providers/ipa/ipa_subdomains.h @@ -28,6 +28,10 @@ #include "providers/dp_backend.h" #include "providers/ipa/ipa_common.h" +/* ==Sid2Name Extended Operation============================================= */ +#define EXOP_SID2NAME_OID "2.16.840.1.113730.3.8.10.4" +#define EXOP_SID2NAME_V1_OID "2.16.840.1.113730.3.8.10.4.1" + struct be_ctx *ipa_get_subdomains_be_ctx(struct be_ctx *be_ctx); int ipa_subdom_init(struct be_ctx *be_ctx, |