From 794bfc68c39ce19e66eb20083adb19d5079d0431 Mon Sep 17 00:00:00 2001
From: Sumit Bose <sbose@redhat.com>
Date: Thu, 12 Sep 2013 12:03:35 +0200
Subject: sdap_domain_add: remove too strict consistency check

The check worked for simple setups but fails e.g. in environment with
trusts.
---
 src/providers/ldap/ldap_common.c | 10 ----------
 1 file changed, 10 deletions(-)

diff --git a/src/providers/ldap/ldap_common.c b/src/providers/ldap/ldap_common.c
index d649e333..b3a048c1 100644
--- a/src/providers/ldap/ldap_common.c
+++ b/src/providers/ldap/ldap_common.c
@@ -77,16 +77,6 @@ sdap_domain_add(struct sdap_options *opts,
     sdom->dom = dom;
     sdom->head = &opts->sdom;
 
-    if (opts->sdom) {
-        /* Only allow subdomains of the parent domain */
-        if (dom->parent == NULL ||
-            dom->parent != opts->sdom->dom) {
-            DEBUG(SSSDBG_OP_FAILURE, ("Domain %s is not a subdomain of %s\n",
-                  dom->name, opts->sdom->dom->name));
-            return EINVAL;
-        }
-    }
-
     talloc_set_destructor((TALLOC_CTX *)sdom, sdap_domain_destructor);
     DLIST_ADD_END(opts->sdom, sdom, struct sdap_domain *);
 
-- 
cgit