From e6fa71b990d7068d66b98015ae54aae399cc84f1 Mon Sep 17 00:00:00 2001 From: Pavel Březina Date: Thu, 3 Jul 2014 12:45:43 +0200 Subject: ad: comment ENOENT when id mapping is disabled Reviewed-by: Jakub Hrozek --- src/providers/ldap/sdap_async_initgroups_ad.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/providers/ldap/sdap_async_initgroups_ad.c b/src/providers/ldap/sdap_async_initgroups_ad.c index 5bcc1ec0..c3b801ab 100644 --- a/src/providers/ldap/sdap_async_initgroups_ad.c +++ b/src/providers/ldap/sdap_async_initgroups_ad.c @@ -648,6 +648,9 @@ static void sdap_ad_resolve_sids_done(struct tevent_req *subreq) talloc_zfree(subreq); if (ret == EOK && sdap_error == ENOENT && dp_error == DP_ERR_OK) { + /* Group was not found, we will ignore the error and continue with + * next group. This may happen for example if the group is built-in, + * but a custom search base is provided. */ DEBUG(SSSDBG_CRIT_FAILURE, "Unable to resolve SID %s - will try next sid.\n", state->current_sid); -- cgit