diff options
author | Pavel Březina <pbrezina@redhat.com> | 2015-09-17 14:46:34 +0200 |
---|---|---|
committer | Jakub Hrozek <jhrozek@redhat.com> | 2015-09-18 13:22:03 +0200 |
commit | 87e0dcaff945f8b8f30030309e16ba26935fcb7b (patch) | |
tree | 1d7a410f921bfe0e0a9e729ca2f3423309fbbe46 /src/responder | |
parent | d5e26a3ec3fa1f217f0afd045a03b29d4f88fe1d (diff) | |
download | sssd-87e0dcaff945f8b8f30030309e16ba26935fcb7b.tar.gz sssd-87e0dcaff945f8b8f30030309e16ba26935fcb7b.tar.xz sssd-87e0dcaff945f8b8f30030309e16ba26935fcb7b.zip |
views: allow ghost members for LOCAL view
LOCAL view does not allow the case when both ghost member and
user override is created so it is safe to allow ghost members
for this view.
Resolves:
https://fedorahosted.org/sssd/ticket/2790
Reviewed-by: Sumit Bose <sbose@redhat.com>
Diffstat (limited to 'src/responder')
-rw-r--r-- | src/responder/nss/nsssrv_cmd.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/responder/nss/nsssrv_cmd.c b/src/responder/nss/nsssrv_cmd.c index ec7e7285a..3e95a3f5a 100644 --- a/src/responder/nss/nsssrv_cmd.c +++ b/src/responder/nss/nsssrv_cmd.c @@ -2948,7 +2948,8 @@ static int fill_grent(struct sss_packet *packet, } el = ldb_msg_find_element(msg, SYSDB_GHOST); if (el) { - if (DOM_HAS_VIEWS(dom) && el->num_values != 0) { + if (DOM_HAS_VIEWS(dom) && !is_local_view(dom->view_name) + && el->num_values != 0) { DEBUG(SSSDBG_CRIT_FAILURE, "Domain has a view [%s] but group [%s] still has " \ "ghost members.\n", dom->view_name, orig_name); |