summaryrefslogtreecommitdiffstats
path: root/src
diff options
context:
space:
mode:
authorStephen Gallagher <sgallagh@redhat.com>2011-02-14 14:59:18 -0500
committerStephen Gallagher <sgallagh@redhat.com>2011-02-19 09:51:07 -0500
commitd5fd77b35a64976fe5ac987de0017789402e6d66 (patch)
tree6e5c71d832937c646b0308aaf26547a2a486f64b /src
parent33fca098b2ec5274de16ff4167bd5ada4c0753d8 (diff)
downloadsssd-d5fd77b35a64976fe5ac987de0017789402e6d66.tar.gz
sssd-d5fd77b35a64976fe5ac987de0017789402e6d66.tar.xz
sssd-d5fd77b35a64976fe5ac987de0017789402e6d66.zip
Point the IPA provider at the compat tree for netgroups
We don't yet have support for IPA's internal representation of netgroups, so we need to use its compatibility mode for the time being.
Diffstat (limited to 'src')
-rw-r--r--src/providers/ipa/ipa_common.c19
1 files changed, 19 insertions, 0 deletions
diff --git a/src/providers/ipa/ipa_common.c b/src/providers/ipa/ipa_common.c
index 401c19305..c146735c7 100644
--- a/src/providers/ipa/ipa_common.c
+++ b/src/providers/ipa/ipa_common.c
@@ -372,12 +372,31 @@ int ipa_get_id_options(struct ipa_options *ipa_opts,
if (NULL == dp_opt_get_string(ipa_opts->id->basic,
SDAP_NETGROUP_SEARCH_BASE)) {
+#if 0
ret = dp_opt_set_string(ipa_opts->id->basic, SDAP_NETGROUP_SEARCH_BASE,
dp_opt_get_string(ipa_opts->id->basic,
SDAP_SEARCH_BASE));
if (ret != EOK) {
goto done;
}
+#else
+ /* We don't yet have support for the native representation
+ * of netgroups in IPA. For now, we need to point at the
+ * compat tree
+ */
+ value = talloc_asprintf(tmpctx, "cn=ng,cn=compat,%s", basedn);
+ if (!value) {
+ ret = ENOMEM;
+ goto done;
+ }
+
+ ret = dp_opt_set_string(ipa_opts->id->basic,
+ SDAP_NETGROUP_SEARCH_BASE,
+ value);
+ if (ret != EOK) {
+ goto done;
+ }
+#endif
DEBUG(6, ("Option %s set to %s\n",
ipa_opts->id->basic[SDAP_NETGROUP_SEARCH_BASE].opt_name,
dp_opt_get_string(ipa_opts->id->basic,