diff options
| author | Pavel Březina <pbrezina@redhat.com> | 2013-10-29 15:20:10 +0100 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2013-10-29 16:07:04 +0100 |
| commit | 58569feb759e7a60a221870d3e0eab066941d71b (patch) | |
| tree | c87ace6e65d3f3697e64353b02d38a6d17efa18f /src/tests | |
| parent | 09a4742bd18181c8838f0d4d84db90f25dbd21fa (diff) | |
| download | sssd-58569feb759e7a60a221870d3e0eab066941d71b.tar.gz sssd-58569feb759e7a60a221870d3e0eab066941d71b.tar.xz sssd-58569feb759e7a60a221870d3e0eab066941d71b.zip | |
sdap_save_group: try to determine domain by SID
GC contains objects from both parent domain and subdomain.
Lets say we have group with UID 5000 that belongs to a subdomain and
overlapping search bases dc=ad,dc=pb and dc=sub,dc=ad,dc=pb. Now
we call 'getent group 5000' and this request goes through data
provider, searching in parent domain first. Even though this
group does not belong to this domain it is found and stored as
ad.pb group.
With this patch we look at group's SID and put it into correct domain.
Diffstat (limited to 'src/tests')
0 files changed, 0 insertions, 0 deletions