diff options
author | Pavel Březina <pbrezina@redhat.com> | 2013-11-12 13:51:34 +0100 |
---|---|---|
committer | Jakub Hrozek <jhrozek@redhat.com> | 2013-12-19 20:11:15 +0100 |
commit | 6385798f807d370fe6685653e337f65bf59f21bc (patch) | |
tree | c709d328a94b8a632f145591082d02f3188c8ea2 /src/providers/ldap/sdap_async_initgroups.c | |
parent | 8b581624e18d6f232d3174ed112d032bb6deffba (diff) | |
download | sssd-6385798f807d370fe6685653e337f65bf59f21bc.tar.gz sssd-6385798f807d370fe6685653e337f65bf59f21bc.tar.xz sssd-6385798f807d370fe6685653e337f65bf59f21bc.zip |
ad: use tokengroups even when id mapping is disabled
https://fedorahosted.org/sssd/ticket/1568
Diffstat (limited to 'src/providers/ldap/sdap_async_initgroups.c')
-rw-r--r-- | src/providers/ldap/sdap_async_initgroups.c | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/src/providers/ldap/sdap_async_initgroups.c b/src/providers/ldap/sdap_async_initgroups.c index 7d5cd2e7c..1b865af0a 100644 --- a/src/providers/ldap/sdap_async_initgroups.c +++ b/src/providers/ldap/sdap_async_initgroups.c @@ -2852,18 +2852,19 @@ static void sdap_get_initgr_user(struct tevent_req *subreq) return; } - if (state->use_id_mapping - && state->opts->dc_functional_level >= DS_BEHAVIOR_WIN2008) { + if (state->opts->dc_functional_level >= DS_BEHAVIOR_WIN2008) { /* Take advantage of AD's tokenGroups mechanism to look up all * parent groups in a single request. */ subreq = sdap_ad_tokengroups_initgroups_send(state, state->ev, + state->id_ctx, state->opts, state->sysdb, state->dom, state->sh, cname, orig_dn, - state->timeout); + state->timeout, + state->use_id_mapping); } else if (state->opts->support_matching_rule && dp_opt_get_bool(state->opts->basic, SDAP_AD_MATCHING_RULE_INITGROUPS)) { @@ -2950,8 +2951,7 @@ static void sdap_get_initgr_done(struct tevent_req *subreq) case SDAP_SCHEMA_RFC2307BIS: case SDAP_SCHEMA_AD: - if (state->use_id_mapping - && state->opts->dc_functional_level >= DS_BEHAVIOR_WIN2008) { + if (state->opts->dc_functional_level >= DS_BEHAVIOR_WIN2008) { ret = sdap_ad_tokengroups_initgroups_recv(subreq); } else if (state->opts->support_matching_rule |