URL: https://github.com/SSSD/sssd/pull/209
Title: #209: IPA: lookup AD users by certificates on IPA clients

lslebodn commented:
"""
On (29/03/17 05:57), Jakub Hrozek wrote:
>So then the consumer of the API is expected to iterate over the paths and find 
>a non-empty attribute? Because the paths from the domains where the user is 
>not are not usable in the sense the getters return only the default attribute
>```
>[jhrozek@client] sssd $ [(review)] dbus-send --print-reply --system 
>--dest=org.freedesktop.sssd.infopipe  
>/org/freedesktop/sssd/infopipe/Users/ipa_2etest/679800500 
>org.freedesktop.DBus.Properties.Get 
>string:org.freedesktop.sssd.infopipe.Users.User string:name
>method return time=1490792119.531265 sender=:1.61 -> destination=:1.70 
>serial=9 reply_serial=2
>   variant       string ""
>```
>
>THe path from the correct domain works
>```
>[jhrozek@client] sssd $ [(review)] dbus-send --print-reply --system 
>--dest=org.freedesktop.sssd.infopipe  
>/org/freedesktop/sssd/infopipe/Users/win_2etrust_2etest/679800500 
>org.freedesktop.DBus.Properties.Get 
>string:org.freedesktop.sssd.infopipe.Users.User string:name
>method return time=1490792131.291432 sender=:1.61 -> destination=:1.71 
>serial=11 reply_serial=2
>   variant       string "[email protected]"
>```
>

IMHO it worth to file a ticket. (at least)

LS

"""

See the full comment at 
https://github.com/SSSD/sssd/pull/209#issuecomment-290151595
_______________________________________________
sssd-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to