From 804dc66b3a646938167ddeb34b011f3f3b6dfebc Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek@redhat.com>
Date: Fri, 15 Jul 2011 18:01:50 +0200
Subject: Explicitly ignore groups with gidNumber=0

https://fedorahosted.org/sssd/ticket/916
---
 src/providers/ldap/ldap_id.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'src/providers/ldap/ldap_id.c')

diff --git a/src/providers/ldap/ldap_id.c b/src/providers/ldap/ldap_id.c
index a3c9c0cd..85d4aa0e 100644
--- a/src/providers/ldap/ldap_id.c
+++ b/src/providers/ldap/ldap_id.c
@@ -346,7 +346,7 @@ struct tevent_req *groups_get_send(TALLOC_CTX *memctx,
         goto fail;
     }
 
-    base_filter = talloc_asprintf(state, "(&(%s=%s)(objectclass=%s)(%s=*)(%s=*))",
+    base_filter = talloc_asprintf(state, "(&(%s=%s)(objectclass=%s)(%s=*)(%s>=1))",
                                 attr_name, clean_name,
                                 ctx->opts->group_map[SDAP_OC_GROUP].name,
                                 ctx->opts->group_map[SDAP_AT_GROUP_NAME].name,
-- 
cgit