diff options
| author | Michal Zidek <mzidek@redhat.com> | 2014-09-10 12:56:54 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2014-09-15 10:13:00 +0200 |
| commit | 7ba70236daccb48432350147d0560b3302518cee (patch) | |
| tree | bc39a26bce57ae6361af1b99bd9d4128208df9ad /src/providers/ldap/sdap_async_enum.c | |
| parent | 6f91c61426c8cfbfec52d5e77ae4650007694e69 (diff) | |
| download | sssd-7ba70236daccb48432350147d0560b3302518cee.tar.gz sssd-7ba70236daccb48432350147d0560b3302518cee.tar.xz sssd-7ba70236daccb48432350147d0560b3302518cee.zip | |
Use the alternative objectclass in group maps.
Use the alternative group objectclass in queries.
Fixes:
https://fedorahosted.org/sssd/ticket/2436
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
Diffstat (limited to 'src/providers/ldap/sdap_async_enum.c')
| -rw-r--r-- | src/providers/ldap/sdap_async_enum.c | 12 |
1 files changed, 9 insertions, 3 deletions
diff --git a/src/providers/ldap/sdap_async_enum.c b/src/providers/ldap/sdap_async_enum.c index 1c69c07f8..242b3172f 100644 --- a/src/providers/ldap/sdap_async_enum.c +++ b/src/providers/ldap/sdap_async_enum.c @@ -717,6 +717,7 @@ static struct tevent_req *enum_groups_send(TALLOC_CTX *memctx, struct enum_groups_state *state; int ret; bool use_mapping; + char *oc_list; req = tevent_req_create(memctx, &state, struct enum_groups_state); if (!req) return NULL; @@ -732,9 +733,14 @@ static struct tevent_req *enum_groups_send(TALLOC_CTX *memctx, sdom->dom->domain_id); /* We always want to filter on objectclass and an available name */ - state->filter = talloc_asprintf(state, - "(&(objectclass=%s)(%s=*)", - ctx->opts->group_map[SDAP_OC_GROUP].name, + oc_list = sdap_make_oc_list(state, ctx->opts->group_map); + if (oc_list == NULL) { + DEBUG(SSSDBG_CRIT_FAILURE, "Failed to create objectClass list.\n"); + ret = ENOMEM; + goto fail; + } + + state->filter = talloc_asprintf(state, "(&(%s)(%s=*)", oc_list, ctx->opts->group_map[SDAP_AT_GROUP_NAME].name); if (!state->filter) { DEBUG(SSSDBG_MINOR_FAILURE, |