URL: https://github.com/SSSD/sssd/pull/209
Title: #209: IPA: lookup AD users by certificates on IPA clients
jhrozek commented:
"""
These patches look OK, but I suspect we might have a bug in the IFP list code.
I added a certificate to a user's idview entry and now listing the certificate
shows:
```
dbus-send --system --print-reply --dest=org.freedesktop.sssd.infopipe
/org/freedesktop/sssd/infopipe/Users
org.freedesktop.sssd.infopipe.Users.ListByCertificate string:"$(cat cert.pem)"
uint32:100
method return time=1490786867.303117 sender=:1.40 -> destination=:1.42 serial=7
reply_serial=2
array [
object path "/org/freedesktop/sssd/infopipe/Users/ipa_2etest/679800500"
object path
"/org/freedesktop/sssd/infopipe/Users/win_2etrust_2etest/679800500"
object path
"/org/freedesktop/sssd/infopipe/Users/sibling_2ewin_2etrust_2etest/679800500"
object path
"/org/freedesktop/sssd/infopipe/Users/child_2ewin_2etrust_2etest/679800500"
]
```
The user is only in the win.trust.test domain:
```
[jhrozek@client] sssd $ [(review)] getent passwd 679800500
[email protected]:*:679800500:679800500:Administrator:/home/win.trust.test/administrator:
```
"""
See the full comment at
https://github.com/SSSD/sssd/pull/209#issuecomment-290061842
_______________________________________________
sssd-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
