#4978 Customized ID views in compat tree don't trigger
Opened 9 years ago by coffmant. Modified 7 years ago

When attempting to use a customized ID view with a compat client (EL5), the documentation says to point the baseDN to cn=<ID view>,cn=views,cn=compat,$SUFFIX.

But doing that doesn't trigger the ID view override.

The result is no entities are returned.

To get it to trigger we have to set it one level deeper cn=users,cn=<ID view>,cn=views,cn=compat,$SUFFIX or cn=groups,cn=<ID view>,cn=views,cn=compat,$SUFFIX

Alexander Bokovoy was able to reproduce this.


CCing Jakub from SSSD to advise.

Alexander says it's a slapi-nis bug :-)

This is slapi-nis bug in the code block around https://git.fedorahosted.org/cgit/slapi-nis.git/tree/src/back-sch.c#n1397 -- a second map_data_foreach_domain() result should also consider if target_dn is equivalent to cn=viewname,cn=views,cn=compat,$suffix (i.e. equal to cn=compat,$suffix search) and consider this case a match.

triage notes:

  • Workaround is to set separate bases for searching users and groups
  • Purely compat tree issue
  • Solaris and AIX should allow to separate users and groups search bases

Metadata Update from @coffmant:
- Issue assigned to someone
- Issue set to the milestone: Future Releases

7 years ago

Login to comment on this ticket.

Metadata