summaryrefslogtreecommitdiff
path: root/src/providers
diff options
context:
space:
mode:
authorSumit Bose <sbose@redhat.com>2012-11-08 10:11:15 +0100
committerJakub Hrozek <jhrozek@redhat.com>2012-11-08 12:47:24 +0100
commitf49848d3b32b97b9199f0e06dd7cb6992ff6eecb (patch)
treefc578fbbe6d21a1837f94ce357272ae322104474 /src/providers
parentff5de51ef7ba824cff814265f3fb4622dc2abb83 (diff)
downloadsssd-f49848d3b32b97b9199f0e06dd7cb6992ff6eecb.tar.gz
sssd-f49848d3b32b97b9199f0e06dd7cb6992ff6eecb.tar.bz2
sssd-f49848d3b32b97b9199f0e06dd7cb6992ff6eecb.zip
Clarify debug message about initgroups and subdomains
The initgroups request is not handled by the IPA provider for subdomain users on purpose because the group membership information is not available on the IPA server but will be directly written to the cache when the PAC of the user is processed. The old generic debug message "Invalid sub-domain request type" might be misleading. This patch adds a specific message for the initgroups case "Initgroups requests are not handled by the IPA provider but are resolved by the responder directly from the cache." and increase the debug level so that typically this message is not shown anymore because it is expected behaviour. Fixes https://fedorahosted.org/sssd/ticket/1610
Diffstat (limited to 'src/providers')
-rw-r--r--src/providers/ipa/ipa_subdomains_id.c7
1 files changed, 7 insertions, 0 deletions
diff --git a/src/providers/ipa/ipa_subdomains_id.c b/src/providers/ipa/ipa_subdomains_id.c
index 5a4ab40b..563fdf2f 100644
--- a/src/providers/ipa/ipa_subdomains_id.c
+++ b/src/providers/ipa/ipa_subdomains_id.c
@@ -99,6 +99,13 @@ struct tevent_req *ipa_get_subdomain_account_info_send(TALLOC_CTX *memctx,
SDAP_OPTS_GROUP, NULL,
&state->attrs, NULL);
break;
+ case BE_REQ_INITGROUPS:
+ ret = ENOTSUP;
+ DEBUG(SSSDBG_TRACE_FUNC, ("Initgroups requests are not handled " \
+ "by the IPA provider but are resolved " \
+ "by the responder directly from the " \
+ "cache.\n"));
+ break;
default:
ret = EINVAL;
DEBUG(SSSDBG_OP_FAILURE, ("Invalid sub-domain request type.\n"));