From f70a1adbfc30b9acc302027439fb8157e0c6ea2a Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Wed, 22 Apr 2015 16:57:37 +0200 Subject: IPA: allow initgroups by SID for AD users If a user from a trusted AD domain is search with the help of an override name the SID from the override anchor is used to search the user in AD. Currently the initgroups request only allows searches by name. With this patch a SID can be used as well. Resolves https://fedorahosted.org/sssd/ticket/2632 Reviewed-by: Jakub Hrozek --- src/providers/data_provider.h | 1 + 1 file changed, 1 insertion(+) (limited to 'src/providers/data_provider.h') diff --git a/src/providers/data_provider.h b/src/providers/data_provider.h index 5df493e9d..89fb06a0d 100644 --- a/src/providers/data_provider.h +++ b/src/providers/data_provider.h @@ -150,6 +150,7 @@ #define DP_SEC_ID_LEN (sizeof(DP_SEC_ID) - 1) #define EXTRA_NAME_IS_UPN "U" +#define EXTRA_NAME_IS_SID "S" #define EXTRA_INPUT_MAYBE_WITH_VIEW "V" /* AUTH related common data and functions */ -- cgit