diff options
| author | Stephen Gallagher <sgallagh@redhat.com> | 2012-06-12 20:29:26 -0400 |
|---|---|---|
| committer | Stephen Gallagher <sgallagh@redhat.com> | 2012-06-13 10:01:12 -0400 |
| commit | 2c62da337e31217d03f5bf0f768b574d166bb2fe (patch) | |
| tree | 3742677f8ebcf242543590122494152c919b3f5f /src/providers/ldap/sdap_async_initgroups.c | |
| parent | d42d371c00c83ae44b9d1c3e88ecbe0e01b112e6 (diff) | |
| download | sssd-2c62da337e31217d03f5bf0f768b574d166bb2fe.tar.gz sssd-2c62da337e31217d03f5bf0f768b574d166bb2fe.tar.xz sssd-2c62da337e31217d03f5bf0f768b574d166bb2fe.zip | |
LDAP: Auto-detect support for the ldap match rule
This patch extends the RootDSE lookup so that we will perform a
second request to test whether the match rule syntax can be used.
If both groups and initgroups are disabled in the configuration,
this lookup request can be skipped.
Diffstat (limited to 'src/providers/ldap/sdap_async_initgroups.c')
| -rw-r--r-- | src/providers/ldap/sdap_async_initgroups.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/providers/ldap/sdap_async_initgroups.c b/src/providers/ldap/sdap_async_initgroups.c index 2f146b016..8a837bcc5 100644 --- a/src/providers/ldap/sdap_async_initgroups.c +++ b/src/providers/ldap/sdap_async_initgroups.c @@ -2665,7 +2665,9 @@ static void sdap_get_initgr_user(struct tevent_req *subreq) return; } - if (dp_opt_get_bool(state->opts->basic, SDAP_AD_MATCHING_RULE_INITGROUPS)) { + if (state->opts->support_matching_rule + && dp_opt_get_bool(state->opts->basic, + SDAP_AD_MATCHING_RULE_INITGROUPS)) { /* Take advantage of AD's extensibleMatch filter to look up * all parent groups in a single request. */ |