diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2013-07-12 17:57:01 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2013-07-17 13:13:10 +0200 |
| commit | 1bb04648878b7b3e3897484e7cfc2d11725c8014 (patch) | |
| tree | af8fa43bd0b320a77fe77ff54ad26b4be44ef8f5 /src/providers/ldap/sdap_access.c | |
| parent | 9c25d1420ddf482b01bdaba54a15bce8a6f32943 (diff) | |
| download | sssd-1bb04648878b7b3e3897484e7cfc2d11725c8014.tar.gz sssd-1bb04648878b7b3e3897484e7cfc2d11725c8014.tar.bz2 sssd-1bb04648878b7b3e3897484e7cfc2d11725c8014.zip | |
LDAP: When resolving a SID, search for groups first, then users
https://fedorahosted.org/sssd/ticket/1997
Most of the time, the SIDs are resolved as a call coming from the PAC
responder during initgroups. In that case at least, it makes sense to
search for group matching that SID first, then users.
We may consider making this behaviour configurable ie for the server
mode where typically the users should be queried first.
Diffstat (limited to 'src/providers/ldap/sdap_access.c')
0 files changed, 0 insertions, 0 deletions