Re: [SSSD] [PATCH] LDAP: Delete entry by SID if not found

[Jakub Hrozek]

On Tue, Oct 15, 2013 at 06:08:18PM +0200, Jakub Hrozek wrote:
> On Fri, Oct 11, 2013 at 11:01:32AM +0200, Pavel Březina wrote:
> > On 10/10/2013 08:13 PM, Jakub Hrozek wrote:
> > > Hi,
> > >
> > > if an entry is removed from LDAP and searched by SID, the SID lookup
> > > code doesn't handle ENOENT and doesn't remove the stray entry from
> > > cache. The attached patch fixes that.
> >
> > Hi,
> > how does this cope with situation when the deleted object is a
> > member of some groups?
>
> The memberof plugin should kick in and remove the user from the groups.
>
> I haven't tested this, because it's should be no different from removing
> a user who is a member of a group, but I will run a quick test before
> submitting the next patch.

Works fine btw.