From cb0f731edf9f2d80f4b6f6429a2065fe03ea7872 Mon Sep 17 00:00:00 2001 From: Lukas Slebodnik Date: Wed, 29 Jan 2014 14:58:53 +0100 Subject: LDAP: require attribute groupType for AD groups Commit 8280c5213094 introduced filtering local groups for trusted/sub domains, but attribute groupType was not available with configuration id_provide ldap and ldap_schema ad. Resolves: https://fedorahosted.org/sssd/ticket/2172 --- src/providers/ldap/ldap_opts.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/providers/ldap/ldap_opts.h b/src/providers/ldap/ldap_opts.h index 9593dfd30..d07051c51 100644 --- a/src/providers/ldap/ldap_opts.h +++ b/src/providers/ldap/ldap_opts.h @@ -295,7 +295,7 @@ struct sdap_attr_map gen_ad2008r2_group_map[] = { { "ldap_group_objectsid", "objectSID", SYSDB_SID, NULL }, { "ldap_group_modify_timestamp", "whenChanged", SYSDB_ORIG_MODSTAMP, NULL }, { "ldap_group_entry_usn", SDAP_AD_USN, SYSDB_USN, NULL }, - { "ldap_group_type", NULL, SYSDB_GROUP_TYPE, NULL }, + { "ldap_group_type", "groupType", SYSDB_GROUP_TYPE, NULL }, SDAP_ATTR_MAP_TERMINATOR }; -- cgit