summaryrefslogtreecommitdiffstats
path: root/src/providers/ipa
diff options
context:
space:
mode:
authorStephen Gallagher <sgallagh@redhat.com>2011-02-14 14:59:18 -0500
committerStephen Gallagher <sgallagh@redhat.com>2011-02-19 10:10:03 -0500
commitc278de2fbf59f7cb187867484972dcb051a1ed97 (patch)
treed1d89a56788bbb8660bba717cdc0a284cdf4b20b /src/providers/ipa
parentbb62ee68cc34041d7229247a86704960088efdae (diff)
downloadsssd-c278de2fbf59f7cb187867484972dcb051a1ed97.tar.gz
sssd-c278de2fbf59f7cb187867484972dcb051a1ed97.tar.xz
sssd-c278de2fbf59f7cb187867484972dcb051a1ed97.zip
Point the IPA provider at the compat tree for netgroups
We don't yet have support for IPA's internal representation of netgroups, so we need to use its compatibility mode for the time being.
Diffstat (limited to 'src/providers/ipa')
-rw-r--r--src/providers/ipa/ipa_common.c19
1 files changed, 19 insertions, 0 deletions
diff --git a/src/providers/ipa/ipa_common.c b/src/providers/ipa/ipa_common.c
index 401c19305..c146735c7 100644
--- a/src/providers/ipa/ipa_common.c
+++ b/src/providers/ipa/ipa_common.c
@@ -372,12 +372,31 @@ int ipa_get_id_options(struct ipa_options *ipa_opts,
if (NULL == dp_opt_get_string(ipa_opts->id->basic,
SDAP_NETGROUP_SEARCH_BASE)) {
+#if 0
ret = dp_opt_set_string(ipa_opts->id->basic, SDAP_NETGROUP_SEARCH_BASE,
dp_opt_get_string(ipa_opts->id->basic,
SDAP_SEARCH_BASE));
if (ret != EOK) {
goto done;
}
+#else
+ /* We don't yet have support for the native representation
+ * of netgroups in IPA. For now, we need to point at the
+ * compat tree
+ */
+ value = talloc_asprintf(tmpctx, "cn=ng,cn=compat,%s", basedn);
+ if (!value) {
+ ret = ENOMEM;
+ goto done;
+ }
+
+ ret = dp_opt_set_string(ipa_opts->id->basic,
+ SDAP_NETGROUP_SEARCH_BASE,
+ value);
+ if (ret != EOK) {
+ goto done;
+ }
+#endif
DEBUG(6, ("Option %s set to %s\n",
ipa_opts->id->basic[SDAP_NETGROUP_SEARCH_BASE].opt_name,
dp_opt_get_string(ipa_opts->id->basic,