diff options
| author | Pavel Reichl <preichl@redhat.com> | 2014-08-22 13:56:32 +0100 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2014-09-08 18:55:26 +0200 |
| commit | 4932db6258ccfb612a3a28eb6a618c2f042b9d58 (patch) | |
| tree | 5df39bd4f6cd671d1a0a0e93d7f7601e1cded312 | |
| parent | 981bf55532fbec91a106f82d7daf32094c76dfe0 (diff) | |
| download | sssd-4932db6258ccfb612a3a28eb6a618c2f042b9d58.tar.gz sssd-4932db6258ccfb612a3a28eb6a618c2f042b9d58.tar.xz sssd-4932db6258ccfb612a3a28eb6a618c2f042b9d58.zip | |
AD: process non-posix nested groups using tokenGroups
When initgr is performed for AD supporting tokenGroups, do not skip
non-posix groups.
Resolves:
https://fedorahosted.org/sssd/ticket/2343
Reviewed-by: Michal Židek <mzidek@redhat.com>
| -rw-r--r-- | src/providers/ldap/sdap_async_initgroups_ad.c | 9 |
1 files changed, 1 insertions, 8 deletions
diff --git a/src/providers/ldap/sdap_async_initgroups_ad.c b/src/providers/ldap/sdap_async_initgroups_ad.c index dee30600f..82d8c8af7 100644 --- a/src/providers/ldap/sdap_async_initgroups_ad.c +++ b/src/providers/ldap/sdap_async_initgroups_ad.c @@ -1149,8 +1149,7 @@ sdap_ad_tokengroups_get_posix_members(TALLOC_CTX *mem_ctx, TALLOC_CTX *tmp_ctx = NULL; struct sss_domain_info *domain = NULL; struct ldb_message *msg = NULL; - const char *attrs[] = {SYSDB_NAME, SYSDB_POSIX, NULL}; - const char *is_posix = NULL; + const char *attrs[] = {SYSDB_NAME, NULL}; const char *name = NULL; char *sid = NULL; char **valid_groups = NULL; @@ -1196,12 +1195,6 @@ sdap_ad_tokengroups_get_posix_members(TALLOC_CTX *mem_ctx, ret = sysdb_search_group_by_sid_str(tmp_ctx, domain, sid, attrs, &msg); if (ret == EOK) { - is_posix = ldb_msg_find_attr_as_string(msg, SYSDB_POSIX, NULL); - if (is_posix != NULL && strcmp(is_posix, "FALSE") == 0) { - /* skip non-posix group */ - continue; - } - /* we will update membership of this group */ name = ldb_msg_find_attr_as_string(msg, SYSDB_NAME, NULL); if (name == NULL) { |