809e531 IPA: Use the correct domain when processing SELinux rules

Authored and Committed by jhrozek 10 years ago
    IPA: Use the correct domain when processing SELinux rules
    
    We blindly used the user's domain for everything. That wrong in case the
    user comes from a subdomain. We should use the IPA domain for accessing
    the SELinux rules and host data and the user domain only for the user.
    
    https://fedorahosted.org/sssd/ticket/2270
    
    Reviewed-by: Pavel Březina <pbrezina@redhat.com>
    (cherry picked from commit 36f606d6743e77721bedeed0907f1be7a19fa4f4)
    
        
file modified
+16 -10