3516495 Ticket 51037 - RFE AD filter rewriter for ObjectSID

Authored and Committed by tbordaz 3 years ago
    Ticket 51037 - RFE AD filter rewriter for ObjectSID
    
    Bug Description:
        AD provides flexibility, to AD clients, to use string representation of objectSID
        (for example S-1-5-21-1305200397-1234-1234-1234)
        To support AD client using 'ObjectSid' shortcut, we need a 389-ds filter rewriters that
        translate the filter '(objectSid=S-1-5-21-1305200397-1234-1234-1234)' into '(objectSid=<objectsid blob>)'
        before processing the filter
        see https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-ada3/afac8414-c614-4c6a-b316-41f5978308bd
    
    Fix Description:
        This patch uses the new ability to registers rewriters (https://pagure.io/389-ds-base/issue/50980)
        It implements a new callback filter rewriter adfilter_rewrite_objectsid in librewriters.so
    
    https://pagure.io/389-ds-base/issue/51037
    
    Reviewed by: Mark Reynolds, Alexander Bokovoy, Simon Pichugin, William Brown (Thanks !)
    
    Platforms tested: F30
    
    Flag Day: no
    
    Doc impact: no
    
        
file modified
+2 -2
file modified
+308 -2