summaryrefslogtreecommitdiffstats
path: root/src/providers
diff options
context:
space:
mode:
authorSumit Bose <sbose@redhat.com>2012-11-08 10:11:15 +0100
committerJakub Hrozek <jhrozek@redhat.com>2012-11-12 00:05:23 +0100
commit068dc82f738fe1fd6f7206f89904a1ff966b7ee3 (patch)
treeead9a377bbf8b396bb8c18492642e7bb730b26a3 /src/providers
parent19a0b74036daf3ff48a09f7688acdbf02f5e3b4a (diff)
downloadsssd-068dc82f738fe1fd6f7206f89904a1ff966b7ee3.tar.gz
sssd-068dc82f738fe1fd6f7206f89904a1ff966b7ee3.tar.xz
sssd-068dc82f738fe1fd6f7206f89904a1ff966b7ee3.zip
Clarify debug message about initgroups and subdomains
The initgroups request is not handled by the IPA provider for subdomain users on purpose because the group membership information is not available on the IPA server but will be directly written to the cache when the PAC of the user is processed. The old generic debug message "Invalid sub-domain request type" might be misleading. This patch adds a specific message for the initgroups case "Initgroups requests are not handled by the IPA provider but are resolved by the responder directly from the cache." and increase the debug level so that typically this message is not shown anymore because it is expected behaviour. Fixes https://fedorahosted.org/sssd/ticket/1610
Diffstat (limited to 'src/providers')
-rw-r--r--src/providers/ipa/ipa_subdomains_id.c7
1 files changed, 7 insertions, 0 deletions
diff --git a/src/providers/ipa/ipa_subdomains_id.c b/src/providers/ipa/ipa_subdomains_id.c
index 5a4ab40b2..563fdf2f6 100644
--- a/src/providers/ipa/ipa_subdomains_id.c
+++ b/src/providers/ipa/ipa_subdomains_id.c
@@ -99,6 +99,13 @@ struct tevent_req *ipa_get_subdomain_account_info_send(TALLOC_CTX *memctx,
SDAP_OPTS_GROUP, NULL,
&state->attrs, NULL);
break;
+ case BE_REQ_INITGROUPS:
+ ret = ENOTSUP;
+ DEBUG(SSSDBG_TRACE_FUNC, ("Initgroups requests are not handled " \
+ "by the IPA provider but are resolved " \
+ "by the responder directly from the " \
+ "cache.\n"));
+ break;
default:
ret = EINVAL;
DEBUG(SSSDBG_OP_FAILURE, ("Invalid sub-domain request type.\n"));