On Tue, 2013-01-15 at 09:02 +0100, Jakub Hrozek wrote: > https://fedorahosted.org/sssd/ticket/1757 > > When the user entry was missing completely after initgroups, we would > never invalidate the user entry from cache. This led to dangling cache > entried in memory cache if the user was removed from the server while > still being in memory cache.
0001: Why are we unconditionally deleting the user from the memory cache even if just groups changed ? 0002: Please add a comment in be_initgroups_prereq() that the first id it he user's primary gid and 'might' be duplicated later ? Also why do we skip verifying the primary gid ? Simo. -- Simo Sorce * Red Hat, Inc * New York _______________________________________________ sssd-devel mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
