From 2cbf205f3fe25087666ff108c2ad380fd3cbfe46 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Tue, 8 Oct 2013 17:50:56 +0200 Subject: AD: Search GC by default during access control, fall back to LDAP Resolves: https://fedorahosted.org/sssd/ticket/2082 In order to allow the ad_access_filter option to work for subdomain users as well, the Global Catalog must be searched. This patch adds a wrapper request atop sdap_access_send that selects the right connection (GC or LDAP) and optionally falls back to LDAP. --- src/providers/ad/ad_access.h | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'src/providers/ad/ad_access.h') diff --git a/src/providers/ad/ad_access.h b/src/providers/ad/ad_access.h index 62259265d..ca5e69729 100644 --- a/src/providers/ad/ad_access.h +++ b/src/providers/ad/ad_access.h @@ -24,9 +24,11 @@ #define AD_ACCESS_H_ struct ad_access_ctx { - struct sdap_id_ctx *sdap_ctx; struct dp_option *ad_options; struct sdap_access_ctx *sdap_access_ctx; + + struct sdap_id_conn_ctx *ldap_ctx; + struct sdap_id_conn_ctx *gc_ctx; }; void -- cgit