diff options
| author | Sumit Bose <sbose@redhat.com> | 2016-07-22 12:19:26 +0200 |
|---|---|---|
| committer | Sumit Bose <sbose@redhat.com> | 2016-07-22 14:17:54 +0200 |
| commit | 5d998691f8013dc1f3f30df653864865db6910dd (patch) | |
| tree | b3ee7d90d6ae3d2f738742424b32906dfc468823 | |
| parent | 1e37a8d772d2b4876014a2bd9d6c2d59aaa7b8b6 (diff) | |
| download | sssd-5d998691f8013dc1f3f30df653864865db6910dd.tar.gz sssd-5d998691f8013dc1f3f30df653864865db6910dd.tar.xz sssd-5d998691f8013dc1f3f30df653864865db6910dd.zip | |
LDAP: allow multiple user principals
| -rw-r--r-- | src/providers/ldap/sdap_async_users.c | 32 |
1 files changed, 18 insertions, 14 deletions
diff --git a/src/providers/ldap/sdap_async_users.c b/src/providers/ldap/sdap_async_users.c index e44c045b3..28101a2d8 100644 --- a/src/providers/ldap/sdap_async_users.c +++ b/src/providers/ldap/sdap_async_users.c @@ -142,6 +142,7 @@ int sdap_save_user(TALLOC_CTX *memctx, char *sid_str; char *dom_sid_str = NULL; struct sss_domain_info *subdomain; + size_t c; DEBUG(SSSDBG_TRACE_FUNC, "Save user\n"); @@ -440,20 +441,23 @@ int sdap_save_user(TALLOC_CTX *memctx, DEBUG(SSSDBG_TRACE_FUNC, "User principal is not available for [%s].\n", user_name); } else { - upn = talloc_strdup(user_attrs, (const char*) el->values[0].data); - if (!upn) { - ret = ENOMEM; - goto done; - } - if (dp_opt_get_bool(opts->basic, SDAP_FORCE_UPPER_CASE_REALM)) { - make_realm_upper_case(upn); - } - DEBUG(SSSDBG_TRACE_FUNC, - "Adding user principal [%s] to attributes of [%s].\n", - upn, user_name); - ret = sysdb_attrs_add_string(user_attrs, SYSDB_UPN, upn); - if (ret) { - goto done; + for (c = 0; c < el->num_values; c++) { + upn = talloc_strdup(tmpctx, (const char*) el->values[c].data); + if (!upn) { + ret = ENOMEM; + goto done; + } + + if (dp_opt_get_bool(opts->basic, SDAP_FORCE_UPPER_CASE_REALM)) { + make_realm_upper_case(upn); + } + DEBUG(SSSDBG_TRACE_FUNC, + "Adding user principal [%s] to attributes of [%s].\n", + upn, user_name); + ret = sysdb_attrs_add_string(user_attrs, SYSDB_UPN, upn); + if (ret) { + goto done; + } } } |