URL: https://github.com/SSSD/sssd/pull/209
Title: #209: IPA: lookup AD users by certificates on IPA clients

jhrozek commented:
"""
So then the consumer of the API is expected to iterate over the paths and find 
a non-empty attribute? Because the paths from the domains where the user is not 
are not usable in the sense the getters return only the default attribute
```
[jhrozek@client] sssd $ [(review)] dbus-send --print-reply --system 
--dest=org.freedesktop.sssd.infopipe  
/org/freedesktop/sssd/infopipe/Users/ipa_2etest/679800500 
org.freedesktop.DBus.Properties.Get 
string:org.freedesktop.sssd.infopipe.Users.User string:name
method return time=1490792119.531265 sender=:1.61 -> destination=:1.70 serial=9 
reply_serial=2
   variant       string ""
```

THe path from the correct domain works
```
[jhrozek@client] sssd $ [(review)] dbus-send --print-reply --system 
--dest=org.freedesktop.sssd.infopipe  
/org/freedesktop/sssd/infopipe/Users/win_2etrust_2etest/679800500 
org.freedesktop.DBus.Properties.Get 
string:org.freedesktop.sssd.infopipe.Users.User string:name
method return time=1490792131.291432 sender=:1.61 -> destination=:1.71 
serial=11 reply_serial=2
   variant       string "[email protected]"
```

"""

See the full comment at 
https://github.com/SSSD/sssd/pull/209#issuecomment-290081343
_______________________________________________
sssd-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to