Hi,
the attached patches should fix https://fedorahosted.org/sssd/ticket/2027, i.e. always show that and AD user is a member of it's primary AD group, even for subdomains.
The first patch in this series just fixes a typo I came across while working at #2027.
bye, Sumit
On Thu, Aug 15, 2013 at 12:42:37PM +0200, Sumit Bose wrote:
Hi,
the attached patches should fix https://fedorahosted.org/sssd/ticket/2027, i.e. always show that and AD user is a member of it's primary AD group, even for subdomains.
The first patch in this series just fixes a typo I came across while working at #2027.
bye, Sumit
From: Sumit Bose sbose@redhat.com Date: Wed, 14 Aug 2013 12:48:40 +0200 Subject: [PATCH 1/3] sdap_get_initgr_done: use the right SID to get a GID
ACK. This one will go to 1.10 as well.
From: Sumit Bose sbose@redhat.com Date: Wed, 14 Aug 2013 16:55:34 +0200 Subject: [PATCH 2/3] sdap_save_user: save original primary GID of subdomain users
ACK. Looks good to me.
From: Sumit Bose sbose@redhat.com Date: Wed, 14 Aug 2013 17:13:13 +0200 Subject: [PATCH 3/3] fill_initgr: add original primary GID if available
ACK. I tested with the ipa_server_mode where it fixed #2027 and also with plain AD and IPA provider to make sure we didn't break anything by accident. Everything seems to have worked as expected.
On Mon, Aug 19, 2013 at 02:10:37PM +0200, Jakub Hrozek wrote:
On Thu, Aug 15, 2013 at 12:42:37PM +0200, Sumit Bose wrote:
Hi,
the attached patches should fix https://fedorahosted.org/sssd/ticket/2027, i.e. always show that and AD user is a member of it's primary AD group, even for subdomains.
The first patch in this series just fixes a typo I came across while working at #2027.
bye, Sumit
From: Sumit Bose sbose@redhat.com Date: Wed, 14 Aug 2013 12:48:40 +0200 Subject: [PATCH 1/3] sdap_get_initgr_done: use the right SID to get a GID
ACK. This one will go to 1.10 as well.
From: Sumit Bose sbose@redhat.com Date: Wed, 14 Aug 2013 16:55:34 +0200 Subject: [PATCH 2/3] sdap_save_user: save original primary GID of subdomain users
ACK. Looks good to me.
From: Sumit Bose sbose@redhat.com Date: Wed, 14 Aug 2013 17:13:13 +0200 Subject: [PATCH 3/3] fill_initgr: add original primary GID if available
ACK. I tested with the ipa_server_mode where it fixed #2027 and also with plain AD and IPA provider to make sure we didn't break anything by accident. Everything seems to have worked as expected.
All three pushed to master, the first one to sssd-1-10, too.
sssd-devel@lists.fedorahosted.org