Hi, this patch should suppress the "sdap_idmap_domain_has_algorithmic_mapping] (0x0080): Could not parse domain SID from [(null)] ]]]" which e.g. is regularly seen with the IPA provider when there is no trust support enabled on the IPA server.
bye, Sumit
From 0421e27c7291506ab3a1c39c65260e477d430fa2 Mon Sep 17 00:00:00 2001 From: Sumit Bose <sb...@redhat.com> Date: Mon, 7 Dec 2015 16:57:05 +0100 Subject: [PATCH] LDAP: check early for missing SID in mapping check Resolves https://fedorahosted.org/sssd/ticket/2830 --- src/providers/ldap/sdap_idmap.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/src/providers/ldap/sdap_idmap.c b/src/providers/ldap/sdap_idmap.c index f4a065b0b251b868344eae856c3655ff30b8a5dc..d33e5d06ded52857698de96177871bbecb128dea 100644 --- a/src/providers/ldap/sdap_idmap.c +++ b/src/providers/ldap/sdap_idmap.c @@ -563,6 +563,12 @@ bool sdap_idmap_domain_has_algorithmic_mapping(struct sdap_idmap_ctx *ctx, return false; } + /* If there is no SID, e.g. IPA without enabled trust support, we cannot + * have algorithmic mapping */ + if (dom_sid == NULL) { + return false; + } + /* This is the first time we've seen this domain * Create a new domain for it. We'll use the dom-sid * as the domain name for now, since we don't have -- 2.1.0
_______________________________________________ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://lists.fedorahosted.org/admin/lists/sssd-devel@lists.fedorahosted.org
