[SSSD] Re: [PATCH] LDAP: Try also the AD access control for IPA users
On 05/17/2016 03:11 PM, Jakub Hrozek wrote:
On Wed, May 11, 2016 at 11:58:11AM +0200, Jakub Hrozek wrote:
> Hi,
>
> the attached patch implements Sumit's idea to solve
> https://fedorahosted.org/sssd/ticket/2927
>
> The user who reported the bug confirmed that the patch works. As an
> additional improvement, they requested that these results should not be
> considered when the cache expires, but immediatelly. But honestly I
> don't know if and how this could be solved (we would need to fetch this
> attribute always on initgroups on both client and server..) so I would
> prefer additional ticket and merge this patch first.
Agreed.
ping; a downstream is waiting for this patch..
Ack.