06fed80 IPA/AD/LDAP: Increase the initgrExpireTimestamp after finishing refresh request

3 files Authored by jhrozek 4 years ago, Committed by pbrezina 4 years ago,
    IPA/AD/LDAP: Increase the initgrExpireTimestamp after finishing refresh request
    
    Related: https://pagure.io/SSSD/sssd/issue/4012
    
    Calls sysdb_set_initgr_expire_timestamp() after each successfull refresh
    of initgroups data to make sure the initgrExpireTimestamp attribute is
    increased.
    
    If you're wondering why the timestamp is not set by the initgroups operation
    itself, see tickets #3744 or #2634 for examples of bugs caused by setting
    the initgrExpireTimestamp too soon.
    
    Reviewed-by: Sumit Bose <sbose@redhat.com>
    (cherry picked from commit cdc44a05d11ae614eb55f219f70150d241cd850f)
    
    Reviewed-by: Sumit Bose <sbose@redhat.com>
    
        
file modified
+12 -0