[PATCH] Fix simple access group control in case-insensitive domains

[Jakub Hrozek]

https://fedorahosted.org/sssd/ticket/1713

In the simple access provider, we need to only canonicalize user names when
comparing with values in the ACL, not when searching the cache. The sysdb
searches might do a base search with a DN constructed with the username
which fails if the username is lower case.

[Jakub Hrozek]

On Thu, Apr 11, 2013 at 09:23:53AM +0200, Jakub Hrozek wrote:
> https://fedorahosted.org/sssd/ticket/1713
>
> In the simple access provider, we need to only canonicalize user names when
> comparing with values in the ACL, not when searching the cache. The sysdb
> searches might do a base search with a DN constructed with the username
> which fails if the username is lower case.

Bump. This is an important patch that needs review.

[Pavel Březina]

On 04/15/2013 11:34 AM, Jakub Hrozek wrote:
> On Thu, Apr 11, 2013 at 09:23:53AM +0200, Jakub Hrozek wrote:
> > https://fedorahosted.org/sssd/ticket/1713
> >
> > In the simple access provider, we need to only canonicalize user names when
> > comparing with values in the ACL, not when searching the cache. The sysdb
> > searches might do a base search with a DN constructed with the username
> > which fails if the username is lower case.
>
> Bump. This is an important patch that needs review.

It's funny that the bug was fixed only by removing some code :)

There's invalid ticket link in the commit message.

Otherwise ack.

[Jakub Hrozek]

On Mon, Apr 15, 2013 at 12:41:03PM +0200, Pavel Březina wrote:
> On 04/15/2013 11:34 AM, Jakub Hrozek wrote:
> > On Thu, Apr 11, 2013 at 09:23:53AM +0200, Jakub Hrozek wrote:
> > > https://fedorahosted.org/sssd/ticket/1713
> > >
> > > In the simple access provider, we need to only canonicalize user names when
> > > comparing with values in the ACL, not when searching the cache. The sysdb
> > > searches might do a base search with a DN constructed with the username
> > > which fails if the username is lower case.
> >
> > Bump. This is an important patch that needs review.
>
> It's funny that the bug was fixed only by removing some code :)
>
> There's invalid ticket link in the commit message.
>
> Otherwise ack.

Pushed to master and after resolving a trivial conflict due to sysdb API
changes, also pushed to sssd-1-9.