diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2011-08-04 16:55:36 +0200 |
|---|---|---|
| committer | Stephen Gallagher <sgallagh@redhat.com> | 2011-10-26 10:29:38 -0400 |
| commit | ff7aa0c9c9df3e5b93abb807806237f844e7f3fe (patch) | |
| tree | 36020aee111d850571ae0425421333cfed75c1e9 /src/providers/ldap/sdap_async_accounts.c | |
| parent | b30701edb4b543bf6432d5ae3a801574ecc83b0c (diff) | |
| download | sssd-ff7aa0c9c9df3e5b93abb807806237f844e7f3fe.tar.gz sssd-ff7aa0c9c9df3e5b93abb807806237f844e7f3fe.tar.xz sssd-ff7aa0c9c9df3e5b93abb807806237f844e7f3fe.zip | |
Fix returning groups when gidNumber attribute is not ordered
https://fedorahosted.org/sssd/ticket/951
Diffstat (limited to 'src/providers/ldap/sdap_async_accounts.c')
| -rw-r--r-- | src/providers/ldap/sdap_async_accounts.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/providers/ldap/sdap_async_accounts.c b/src/providers/ldap/sdap_async_accounts.c index 67e8629d6..79904e5df 100644 --- a/src/providers/ldap/sdap_async_accounts.c +++ b/src/providers/ldap/sdap_async_accounts.c @@ -2220,11 +2220,13 @@ struct tevent_req *sdap_initgr_rfc2307_send(TALLOC_CTX *memctx, return NULL; } - filter = talloc_asprintf(state, "(&(%s=%s)(objectclass=%s)(%s=*)(%s>=1))", + filter = talloc_asprintf(state, + "(&(%s=%s)(objectclass=%s)(%s=*)(&(%s=*)(!(%s=0))))", opts->group_map[SDAP_AT_GROUP_MEMBER].name, clean_name, opts->group_map[SDAP_OC_GROUP].name, opts->group_map[SDAP_AT_GROUP_NAME].name, + opts->group_map[SDAP_AT_GROUP_GID].name, opts->group_map[SDAP_AT_GROUP_GID].name); if (!filter) { talloc_zfree(req); |