>From c79290811ad1b4f21999cf3a08ca7f750f36dcdc Mon Sep 17 00:00:00 2001
From: Lukas Slebodnik <lslebodn@redhat.com>
Date: Sat, 18 Apr 2015 18:19:37 +0200
Subject: [PATCH] GPO: Fix crash with GPO and missing security descriptor

Resolves:
https://fedorahosted.org/sssd/ticket/2629
---
 src/providers/ad/ad_gpo.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/providers/ad/ad_gpo.c b/src/providers/ad/ad_gpo.c
index 23d67bc35ded5d93ee4cb63bf5ea6f5e938257cd..1540361c00db5e63e6750c07991ce0249d7b747b 100644
--- a/src/providers/ad/ad_gpo.c
+++ b/src/providers/ad/ad_gpo.c
@@ -841,6 +841,12 @@ ad_gpo_filter_gpos_by_dacl(TALLOC_CTX *mem_ctx,
     }
 
     for (i = 0; i < num_candidate_gpos; i++) {
+        if (candidate_gpo->gpo_sd == NULL) {
+            DEBUG(SSSDBG_MINOR_FAILURE,
+                  "Skipping GPO [%s] due to missing security descriptor\n",
+                  candidate_gpo->gpo_dn);
+            continue;
+        }
 
         access_allowed = false;
         candidate_gpo = candidate_gpos[i];
-- 
2.3.5