#4073 Let IPA client read IPA objects via LDAP and not via extdom plugin when resolving trusted users and groups
Closed: Fixed 2 years ago by pbrezina. Opened 2 years ago by sbose.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1746878

Description of problem:
Currently when a IPA client is resolving trusted user and group with the help
of the extdom plugin it uses the extdom plugin as well to lookup IPA objects.
This might cause issues if e.g. there is a user in IPA with the same name as a
group in AD or the other way round.

To solve this and to lower the load on the extdom plugin on the IPA server side
it would be better to lookup IPA object directly from LDAP on the IPA server.

Metadata Update from @sbose:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1746878

2 years ago

Metadata Update from @sbose:
- Custom field patch adjusted to on

2 years ago

Commit 27b141f relates to this ticket

  • master
    • 27b141f - ipa: use LDAP not extdom to lookup IPA users and groups

Metadata Update from @pbrezina:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

2 years ago
  • sssd-1-16
    • fbd3890 - ipa: use LDAP not extdom to lookup IPA users and groups

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/5041

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.