diff options
| author | Pavel Březina <pbrezina@redhat.com> | 2013-11-12 13:51:34 +0100 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2013-12-18 17:08:06 +0100 |
| commit | 214481d379fa2eeee2bfbe42ad813864218ee95a (patch) | |
| tree | e212a4f641752782458a9c6435180c299cf73537 /src/providers/ldap/sdap_async_initgroups.c | |
| parent | df82d71589d62f68e3e95cb9a903d2b08d26b65a (diff) | |
| download | sssd-214481d379fa2eeee2bfbe42ad813864218ee95a.tar.gz sssd-214481d379fa2eeee2bfbe42ad813864218ee95a.tar.xz sssd-214481d379fa2eeee2bfbe42ad813864218ee95a.zip | |
ad: use tokengroups even when id mapping is disabled
https://fedorahosted.org/sssd/ticket/1568
Diffstat (limited to 'src/providers/ldap/sdap_async_initgroups.c')
| -rw-r--r-- | src/providers/ldap/sdap_async_initgroups.c | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/src/providers/ldap/sdap_async_initgroups.c b/src/providers/ldap/sdap_async_initgroups.c index 7d5cd2e7c..1b865af0a 100644 --- a/src/providers/ldap/sdap_async_initgroups.c +++ b/src/providers/ldap/sdap_async_initgroups.c @@ -2852,18 +2852,19 @@ static void sdap_get_initgr_user(struct tevent_req *subreq) return; } - if (state->use_id_mapping - && state->opts->dc_functional_level >= DS_BEHAVIOR_WIN2008) { + if (state->opts->dc_functional_level >= DS_BEHAVIOR_WIN2008) { /* Take advantage of AD's tokenGroups mechanism to look up all * parent groups in a single request. */ subreq = sdap_ad_tokengroups_initgroups_send(state, state->ev, + state->id_ctx, state->opts, state->sysdb, state->dom, state->sh, cname, orig_dn, - state->timeout); + state->timeout, + state->use_id_mapping); } else if (state->opts->support_matching_rule && dp_opt_get_bool(state->opts->basic, SDAP_AD_MATCHING_RULE_INITGROUPS)) { @@ -2950,8 +2951,7 @@ static void sdap_get_initgr_done(struct tevent_req *subreq) case SDAP_SCHEMA_RFC2307BIS: case SDAP_SCHEMA_AD: - if (state->use_id_mapping - && state->opts->dc_functional_level >= DS_BEHAVIOR_WIN2008) { + if (state->opts->dc_functional_level >= DS_BEHAVIOR_WIN2008) { ret = sdap_ad_tokengroups_initgroups_recv(subreq); } else if (state->opts->support_matching_rule |