diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2011-08-04 16:55:36 +0200 |
|---|---|---|
| committer | Stephen Gallagher <sgallagh@redhat.com> | 2011-08-04 14:48:32 -0400 |
| commit | 86d77907310fa939fe89884fbbdf2142c06a420e (patch) | |
| tree | ed88d61576af4194ab24bdf735fe6b9fb564f3f8 /src/providers/ldap/ldap_id.c | |
| parent | 8b6801a0b180ef87118e8f071eb2eeea4607baf1 (diff) | |
| download | sssd-86d77907310fa939fe89884fbbdf2142c06a420e.tar.gz sssd-86d77907310fa939fe89884fbbdf2142c06a420e.tar.xz sssd-86d77907310fa939fe89884fbbdf2142c06a420e.zip | |
Fix returning groups when gidNumber attribute is not ordered
https://fedorahosted.org/sssd/ticket/951
Diffstat (limited to 'src/providers/ldap/ldap_id.c')
| -rw-r--r-- | src/providers/ldap/ldap_id.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/providers/ldap/ldap_id.c b/src/providers/ldap/ldap_id.c index 85d4aa0e5..be347e178 100644 --- a/src/providers/ldap/ldap_id.c +++ b/src/providers/ldap/ldap_id.c @@ -346,10 +346,12 @@ struct tevent_req *groups_get_send(TALLOC_CTX *memctx, goto fail; } - base_filter = talloc_asprintf(state, "(&(%s=%s)(objectclass=%s)(%s=*)(%s>=1))", + base_filter = talloc_asprintf(state, + "(&(%s=%s)(objectclass=%s)(%s=*)(&(%s=*)(!(%s=0))))", attr_name, clean_name, ctx->opts->group_map[SDAP_OC_GROUP].name, ctx->opts->group_map[SDAP_AT_GROUP_NAME].name, + ctx->opts->group_map[SDAP_AT_GROUP_GID].name, ctx->opts->group_map[SDAP_AT_GROUP_GID].name); talloc_zfree(clean_name); if (!base_filter) { |