Re: [Freeipa-devel] [PATCH 0215-0216] Child domain fixes for AD trust

2016-08-22 Thread Martin Babinsky
On 08/19/2016 10:28 AM, Alexander Bokovoy wrote: On Wed, 17 Aug 2016, Martin Babinsky wrote: On 08/08/2016 01:27 PM, Alexander Bokovoy wrote: Hi! Attached two patches attempt to fix some of the issues we see with child domains. SSSD only 'sees' users from child domains if there is an ID range

Re: [Freeipa-devel] [PATCH 0215-0216] Child domain fixes for AD trust

2016-08-19 Thread Alexander Bokovoy
On Wed, 17 Aug 2016, Martin Babinsky wrote: On 08/08/2016 01:27 PM, Alexander Bokovoy wrote: Hi! Attached two patches attempt to fix some of the issues we see with child domains. SSSD only 'sees' users from child domains if there is an ID range for each of them. However, after refactoring of t

Re: [Freeipa-devel] [PATCH 0215-0216] Child domain fixes for AD trust

2016-08-17 Thread Martin Babinsky
On 08/08/2016 01:27 PM, Alexander Bokovoy wrote: Hi! Attached two patches attempt to fix some of the issues we see with child domains. SSSD only 'sees' users from child domains if there is an ID range for each of them. However, after refactoring of trust code when external trust was introduced,

[Freeipa-devel] [PATCH 0215-0216] Child domain fixes for AD trust

2016-08-08 Thread Alexander Bokovoy
Hi! Attached two patches attempt to fix some of the issues we see with child domains. SSSD only 'sees' users from child domains if there is an ID range for each of them. However, after refactoring of trust code when external trust was introduced, part of the range creation had wrong assumption t