#303 RFE: get[pw|gr]ent should return previously cached users when enumeration = false
Closed: wontfix 3 years ago by pbrezina. Opened 14 years ago by sgallagh.

If full enumerations are disabled on a domain, we should still return any users that have been directly requested by get[pw|gr][nam|uid] requests, as they are already cached in the LDB.

This would benefit PolicyKit.


get[pw|gr][nam|uid|gid] requests are always replied to.
What we do not reply to is get[pw|gr]ent requests.
But we can enable that.

Marking this as WONTFIX. This is not a good idea, as it could result in an unexpected information leak.

resolution: => wontfix
status: new => closed

Reopening:
there is no unexpected information leak.
User information is generally public and you can obtain it at any time with an explicit call.

resolution: wontfix =>
status: closed => reopened

Fields changed

rhbz: => 0

Metadata Update from @sgallagh:
- Issue assigned to simo
- Issue set to the milestone: SSSD Patches welcome

7 years ago

Thank you for taking time to submit this request for SSSD. Unfortunately this issue was not given priority and the team lacks the capacity to work on it at this time.

Given that we are unable to fulfill this request I am closing the issue as wontfix.

If the issue still persist on recent SSSD you can request re-consideration of this decision by reopening this issue. Please provide additional technical details about its importance to you.

Thank you for understanding.

Metadata Update from @pbrezina:
- Issue close_status updated to: wontfix
- Issue status updated to: Closed (was: Open)

3 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1345

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata