From 561ed2fd03bab04cfdddbc09c4b48563c9d9b87e Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Wed, 28 Jan 2015 14:04:45 +0100 Subject: AD: use GC for SID requests as well If a universal group is looked up by SID the cross-domain members must be resolved with the help of the Global Catalog. Related to https://fedorahosted.org/sssd/ticket/2514 Reviewed-by: Jakub Hrozek --- src/providers/ipa/ipa_subdomains_id.c | 1 + 1 file changed, 1 insertion(+) (limited to 'src/providers/ipa/ipa_subdomains_id.c') diff --git a/src/providers/ipa/ipa_subdomains_id.c b/src/providers/ipa/ipa_subdomains_id.c index c8714a216..0508e14b6 100644 --- a/src/providers/ipa/ipa_subdomains_id.c +++ b/src/providers/ipa/ipa_subdomains_id.c @@ -603,6 +603,7 @@ ipa_get_ad_acct_send(TALLOC_CTX *mem_ctx, */ switch (state->ar->entry_type & BE_REQ_TYPE_MASK) { case BE_REQ_INITGROUPS: + case BE_REQ_BY_SECID: case BE_REQ_GROUP: clist = ad_gc_conn_list(req, ad_id_ctx, state->obj_dom); if (clist == NULL) { -- cgit