From cdc3bb983c6614ab89c45002a657c33ef4a6a582 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek@redhat.com>
Date: Fri, 15 Jul 2011 18:01:50 +0200
Subject: Explicitly ignore groups with gidNumber=0

https://fedorahosted.org/sssd/ticket/916
---
 src/providers/ldap/ldap_id.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'src/providers/ldap/ldap_id.c')

diff --git a/src/providers/ldap/ldap_id.c b/src/providers/ldap/ldap_id.c
index a6fb05bd..f58af617 100644
--- a/src/providers/ldap/ldap_id.c
+++ b/src/providers/ldap/ldap_id.c
@@ -336,7 +336,7 @@ struct tevent_req *groups_get_send(TALLOC_CTX *memctx,
     }
 
     state->filter =
-            talloc_asprintf(state, "(&(%s=%s)(objectclass=%s)(%s=*)(%s=*))",
+            talloc_asprintf(state, "(&(%s=%s)(objectclass=%s)(%s=*)(%s>=1))",
                             attr_name, clean_name,
                             ctx->opts->group_map[SDAP_OC_GROUP].name,
                             ctx->opts->group_map[SDAP_AT_GROUP_NAME].name,
-- 
cgit