On Thu, Aug 15, 2013 at 12:42:37PM +0200, Sumit Bose wrote:
Hi,
the attached patches should fix https://fedorahosted.org/sssd/ticket/2027, i.e. always show that and AD user is a member of it's primary AD group, even for subdomains.
The first patch in this series just fixes a typo I came across while working at #2027.
bye, Sumit
From: Sumit Bose sbose@redhat.com Date: Wed, 14 Aug 2013 12:48:40 +0200 Subject: [PATCH 1/3] sdap_get_initgr_done: use the right SID to get a GID
ACK. This one will go to 1.10 as well.
From: Sumit Bose sbose@redhat.com Date: Wed, 14 Aug 2013 16:55:34 +0200 Subject: [PATCH 2/3] sdap_save_user: save original primary GID of subdomain users
ACK. Looks good to me.
From: Sumit Bose sbose@redhat.com Date: Wed, 14 Aug 2013 17:13:13 +0200 Subject: [PATCH 3/3] fill_initgr: add original primary GID if available
ACK. I tested with the ipa_server_mode where it fixed #2027 and also with plain AD and IPA provider to make sure we didn't break anything by accident. Everything seems to have worked as expected.