summaryrefslogtreecommitdiffstats
path: root/src/providers/ldap/ldap_id.c
diff options
context:
space:
mode:
authorStephen Gallagher <sgallagh@redhat.com>2011-03-11 05:06:48 -0500
committerStephen Gallagher <sgallagh@redhat.com>2011-03-17 11:34:00 -0400
commit6ebae9d53672aba7fab0543e392d87de95cea24c (patch)
treea16540b4ff68874ff7c28b6977734a119c1fca5b /src/providers/ldap/ldap_id.c
parentf6750918324f4afcd505673baccb78f3963ce63e (diff)
downloadsssd-6ebae9d53672aba7fab0543e392d87de95cea24c.tar.gz
sssd-6ebae9d53672aba7fab0543e392d87de95cea24c.tar.xz
sssd-6ebae9d53672aba7fab0543e392d87de95cea24c.zip
Ignore users and groups that lack mandatory attributes
https://fedorahosted.org/sssd/ticket/824
Diffstat (limited to 'src/providers/ldap/ldap_id.c')
-rw-r--r--src/providers/ldap/ldap_id.c9
1 files changed, 6 insertions, 3 deletions
diff --git a/src/providers/ldap/ldap_id.c b/src/providers/ldap/ldap_id.c
index 9a2342800..776df1ac2 100644
--- a/src/providers/ldap/ldap_id.c
+++ b/src/providers/ldap/ldap_id.c
@@ -335,9 +335,12 @@ struct tevent_req *groups_get_send(TALLOC_CTX *memctx,
goto fail;
}
- state->filter = talloc_asprintf(state, "(&(%s=%s)(objectclass=%s))",
- attr_name, clean_name,
- ctx->opts->group_map[SDAP_OC_GROUP].name);
+ state->filter =
+ talloc_asprintf(state, "(&(%s=%s)(objectclass=%s)(%s=*)(%s=*))",
+ attr_name, clean_name,
+ ctx->opts->group_map[SDAP_OC_GROUP].name,
+ ctx->opts->group_map[SDAP_AT_GROUP_NAME].name,
+ ctx->opts->group_map[SDAP_AT_GROUP_GID].name);
if (!state->filter) {
DEBUG(2, ("Failed to build filter\n"));
ret = ENOMEM;