diff options
| author | Sumit Bose <sbose@redhat.com> | 2013-12-18 13:47:31 +0100 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2013-12-19 17:36:09 +0100 |
| commit | 4cd1cb275a09a188dce1eeccecc868a854a13b77 (patch) | |
| tree | f994ea5f9ea10236037b8fdfb9d83fdc66083f9a /src/providers/ldap/sdap_async.h | |
| parent | b61518461e08ba0e33ffd6c0c47da709a5757658 (diff) | |
| download | sssd-4cd1cb275a09a188dce1eeccecc868a854a13b77.tar.gz sssd-4cd1cb275a09a188dce1eeccecc868a854a13b77.tar.xz sssd-4cd1cb275a09a188dce1eeccecc868a854a13b77.zip | |
AD: cross-domain membership fix
A recent patch directed all call related to group membership lookups to
the AD LDAP port to fix an issue related to missing group memberships in
the Global Catalog. As a side-effect it broke cross-domain
group-memberships because those cannot be resolved by the connection to
the LDAP port.
The patch tires to fix this by restoring the original behaviour in the
top-level lookup calls in the AD provider and switching to the LDAP port
only for the LDAP request which is expected to return the full group
membership.
Additionally this patch contains a related fix for the tokenGroups with
Posix attributes patch. The original connection, typically a Global
Catalog connection in the AD case is passed down the stack so that the
group lookup after the tokenGroups request can run over the same
connection.
Diffstat (limited to 'src/providers/ldap/sdap_async.h')
| -rw-r--r-- | src/providers/ldap/sdap_async.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/providers/ldap/sdap_async.h b/src/providers/ldap/sdap_async.h index f47437553..33e8708ab 100644 --- a/src/providers/ldap/sdap_async.h +++ b/src/providers/ldap/sdap_async.h @@ -297,6 +297,7 @@ struct tevent_req * sdap_ad_tokengroups_initgroups_send(TALLOC_CTX *mem_ctx, struct tevent_context *ev, struct sdap_id_ctx *id_ctx, + struct sdap_id_conn_ctx *conn, struct sdap_options *opts, struct sysdb_ctx *sysdb, struct sss_domain_info *domain, |