On Tue, 26 Jun 2012, Sumit Bose wrote:

this patch contains the KDC part of the external groups handling. If
group SIDs from the PAC can be found in the ipaExternalGroup objects and
the external groups are member of local groups, the SIDs of the local
groups are added to the PAC. If the PAC this then read by the SSSD pac
responder the user from the PAC is added to the local groups on the
ACK. There were code-related comments from Simo yesterday on IRC but it
was agreed to solve those in separate patches.

/ Alexander Bokovoy

Freeipa-devel mailing list

Reply via email to