diff options
author | Jakub Hrozek <jhrozek@redhat.com> | 2011-08-04 16:55:36 +0200 |
---|---|---|
committer | Stephen Gallagher <sgallagh@redhat.com> | 2011-08-04 14:56:58 -0400 |
commit | b0c10eb7a9aff9063af106cc704ca1260f4024ac (patch) | |
tree | 1676012e8b2dc2dfdfd8dc3bafef8da801e89199 /src/providers/ldap/ldap_id.c | |
parent | 69f76cb34622f6eb7f3d56d44d583e910a7f9f51 (diff) | |
download | sssd-b0c10eb7a9aff9063af106cc704ca1260f4024ac.tar.gz sssd-b0c10eb7a9aff9063af106cc704ca1260f4024ac.tar.xz sssd-b0c10eb7a9aff9063af106cc704ca1260f4024ac.zip |
Fix returning groups when gidNumber attribute is not ordered
https://fedorahosted.org/sssd/ticket/951
Diffstat (limited to 'src/providers/ldap/ldap_id.c')
-rw-r--r-- | src/providers/ldap/ldap_id.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/providers/ldap/ldap_id.c b/src/providers/ldap/ldap_id.c index f58af6170..c6a11f488 100644 --- a/src/providers/ldap/ldap_id.c +++ b/src/providers/ldap/ldap_id.c @@ -336,10 +336,12 @@ struct tevent_req *groups_get_send(TALLOC_CTX *memctx, } state->filter = - talloc_asprintf(state, "(&(%s=%s)(objectclass=%s)(%s=*)(%s>=1))", + talloc_asprintf(state, + "(&(%s=%s)(objectclass=%s)(%s=*)(&(%s=*)(!(%s=0))))", attr_name, clean_name, ctx->opts->group_map[SDAP_OC_GROUP].name, ctx->opts->group_map[SDAP_AT_GROUP_NAME].name, + ctx->opts->group_map[SDAP_AT_GROUP_GID].name, ctx->opts->group_map[SDAP_AT_GROUP_GID].name); if (!state->filter) { DEBUG(2, ("Failed to build filter\n")); |