On Thu, Aug 15, 2013 at 12:42:37PM +0200, Sumit Bose wrote:
Hi,
the attached patches should fix
https://fedorahosted.org/sssd/ticket/2027, i.e. always show that and AD
user is a member of it's primary AD group, even for subdomains.
The first patch in this series just fixes a typo I came across while
working at #2027.
bye,
Sumit
From: Sumit Bose <sbose(a)redhat.com>
Date: Wed, 14 Aug 2013 12:48:40 +0200
Subject: [PATCH 1/3] sdap_get_initgr_done: use the right SID to get a GID
ACK. This one will go to 1.10 as well.
From: Sumit Bose <sbose(a)redhat.com>
Date: Wed, 14 Aug 2013 16:55:34 +0200
Subject: [PATCH 2/3] sdap_save_user: save original primary GID of subdomain
users
ACK. Looks good to me.
From: Sumit Bose <sbose(a)redhat.com>
Date: Wed, 14 Aug 2013 17:13:13 +0200
Subject: [PATCH 3/3] fill_initgr: add original primary GID if available
ACK. I tested with the ipa_server_mode where it fixed #2027 and also
with plain AD and IPA provider to make sure we didn't break anything by
accident. Everything seems to have worked as expected.