Back to bug 1300740

Who When What Removed Added
RHEL Program Management 2016-01-21 15:50:19 UTC Keywords FutureFeature
Red Hat Bugzilla 2016-01-21 15:50:19 UTC Doc Type Bug Fix Enhancement
Jakub Hrozek 2016-01-22 15:32:41 UTC Priority unspecified high
Assignee sssd-maint jhrozek
Severity unspecified high
Orion Poplawski 2016-01-28 03:52:43 UTC CC orion
Petr Vobornik 2016-02-22 11:37:50 UTC CC pvoborni
Alexander Bokovoy 2016-02-22 13:00:49 UTC Blocks 1310664
Eugene Keck 2016-02-22 14:46:13 UTC CC ekeck
Hardware Unspecified All
OS Unspecified Linux
Ellen Newlands 2016-02-23 20:05:01 UTC CC enewland
Namita Soman 2016-02-23 20:06:05 UTC CC nsoman
Jakub Hrozek 2016-02-23 20:09:16 UTC Doc Text Feature: In an IPA-AD trust setup, getpwnam and getgrnam calls for IPA groups that contain AD members via external groups used to only return members who were cached via an initgroups call. This patch adds the ability to resolve external members without the initgroups operation as well.

Reason: The slapi-nis plugin makes heavy use of this functionality when presenting the external group members to the compatibility tree which is then consumed by legacy clients. It's the only way to define sudo rules through an external group to legacy clients at the moment.

Result: calling "getent group" for an IPA group that contains a member from an Active Directory domain would return the AD members as well. Please note that "Domain Users" are a bit of a special case here and its members are not resolved. This is because Domain Users are a primary group for AD users, but do not contain its members as LDAP attributes.
Jakub Hrozek 2016-02-24 13:15:18 UTC Status NEW POST
Jan Kurik 2016-02-24 13:31:27 UTC Blocks 1311569
Jan Kurik 2016-02-24 13:32:05 UTC Keywords ZStream
Jakub Hrozek 2016-02-24 14:29:38 UTC Status POST MODIFIED
Fixed In Version sssd-1.13.0-42.el7
Kaleem 2016-02-25 06:34:24 UTC CC ksiddiqu
John Skeoch 2016-06-01 01:29:05 UTC CC preichl
errata-xmlrpc 2016-06-21 08:41:15 UTC Status MODIFIED ON_QA
Sudhir Menon 2016-08-12 14:40:19 UTC CC sumenon
Flags needinfo?(jhrozek)
Jakub Hrozek 2016-08-12 14:46:14 UTC Flags needinfo?(jhrozek)
Sudhir Menon 2016-08-12 14:55:20 UTC Status ON_QA VERIFIED
errata-xmlrpc 2016-11-02 14:21:35 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2016-11-04 07:15:27 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2016-11-04 03:15:27 UTC
Pavel Březina 2020-05-02 17:53:15 UTC Link ID Github SSSD/sssd/issues/3564

Back to bug 1300740