From 30ee051025753b63ceb19d3b83c44019a19554a1 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek@redhat.com>
Date: Tue, 11 Feb 2014 22:51:48 +0100
Subject: SSS_CACHE: Reset the initgroups attribute when resetting users

---
 src/tools/sss_cache.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/tools/sss_cache.c b/src/tools/sss_cache.c
index 9f22862e9..ed02b7b60 100644
--- a/src/tools/sss_cache.c
+++ b/src/tools/sss_cache.c
@@ -421,6 +421,12 @@ static errno_t invalidate_entry(TALLOC_CTX *ctx,
         if (ret == EOK) {
             switch (entry_type) {
                 case TYPE_USER:
+                    /* For users, we also need to reset the initgroups
+                     * cache expiry */
+                    ret = sysdb_attrs_add_time_t(sys_attrs,
+                            SYSDB_INITGR_EXPIRE, 1);
+                    if (ret != EOK) return ret;
+
                     ret = sysdb_set_user_attr(domain, name, sys_attrs,
                                               SYSDB_MOD_REP);
                     break;
-- 
cgit