diff options
| author | Pavel Březina <pbrezina@redhat.com> | 2013-11-12 13:51:34 +0100 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2013-12-18 12:42:41 +0100 |
| commit | ed3e08e6ff267722c605141a0b57774efe4cb531 (patch) | |
| tree | 0a0236b8d608b67246251ac9d3f005e9eaa6bed1 /src/providers/ldap/sdap_async_initgroups.c | |
| parent | 29a61bce88147872b5086278d37b1e58726032d1 (diff) | |
| download | sssd-ed3e08e6ff267722c605141a0b57774efe4cb531.tar.gz sssd-ed3e08e6ff267722c605141a0b57774efe4cb531.tar.xz sssd-ed3e08e6ff267722c605141a0b57774efe4cb531.zip | |
ad: use tokengroups even when id mapping is disabled
https://fedorahosted.org/sssd/ticket/1568
Diffstat (limited to 'src/providers/ldap/sdap_async_initgroups.c')
| -rw-r--r-- | src/providers/ldap/sdap_async_initgroups.c | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/src/providers/ldap/sdap_async_initgroups.c b/src/providers/ldap/sdap_async_initgroups.c index 638dc6d13..1abcb99e6 100644 --- a/src/providers/ldap/sdap_async_initgroups.c +++ b/src/providers/ldap/sdap_async_initgroups.c @@ -2848,18 +2848,19 @@ static void sdap_get_initgr_user(struct tevent_req *subreq) return; } - if (state->use_id_mapping - && state->opts->dc_functional_level >= DS_BEHAVIOR_WIN2008) { + if (state->opts->dc_functional_level >= DS_BEHAVIOR_WIN2008) { /* Take advantage of AD's tokenGroups mechanism to look up all * parent groups in a single request. */ subreq = sdap_ad_tokengroups_initgroups_send(state, state->ev, + state->id_ctx, state->opts, state->sysdb, state->dom, state->sh, cname, orig_dn, - state->timeout); + state->timeout, + state->use_id_mapping); } else if (state->opts->support_matching_rule && dp_opt_get_bool(state->opts->basic, SDAP_AD_MATCHING_RULE_INITGROUPS)) { @@ -2946,8 +2947,7 @@ static void sdap_get_initgr_done(struct tevent_req *subreq) case SDAP_SCHEMA_RFC2307BIS: case SDAP_SCHEMA_AD: - if (state->use_id_mapping - && state->opts->dc_functional_level >= DS_BEHAVIOR_WIN2008) { + if (state->opts->dc_functional_level >= DS_BEHAVIOR_WIN2008) { ret = sdap_ad_tokengroups_initgroups_recv(subreq); } else if (state->opts->support_matching_rule |