#8660 ipasam: implement PASSDB getgrnam call
Closed: fixed 3 years ago by rcritten. Opened 3 years ago by abbra.

ipasam already implemented retrieval of groups for MS-SAMR calls. However, it did not have implementation of a group retrieval for the path of lookup_name() function in Samba. The lookup_name() is used in many places in smbd and winbindd.

With this change it will be possible to resolve IPA groups in Windows UI (Security tab) and console (net localgroup ...). When Global Catalog service is enabled, it will be possible to search for those groups as well.


master:

  • 968f8ad ipa-kdb: provide correct logon time in MS-PAC from authentication time
  • e6f8d8b ipasam: implement PASSDB getgrnam call
  • 7588251 ipasam: allow search of users by user principal name (UPN)
  • a1e2fe9 ipasam: free trusted domain context on failure
  • 08d7d90 ipasam: derive parent domain for subdomains automatically
  • 214aeb7 ipaserver/dcerpc: store forest topology as a blob in ipasam
  • 9d19c08 ipatests: use fully qualified name for AD admin when establishing trust
  • 9424256 Update ipa_sam.c
  • ae7cd47 trust-fetch-domains: use custom krb5.conf overlay for all trust operations
  • 54e5ffc use a constant instead of /var/lib/sss/keytabs

ipa-4-9:

  • f8bf374 ipa-kdb: provide correct logon time in MS-PAC from authentication time
  • 962052a ipasam: implement PASSDB getgrnam call
  • 2e8eb0f ipasam: allow search of users by user principal name (UPN)
  • e8f927d ipasam: free trusted domain context on failure
  • f103172 ipasam: derive parent domain for subdomains automatically
  • 3d706b6 ipaserver/dcerpc: store forest topology as a blob in ipasam
  • dc16c24 ipatests: use fully qualified name for AD admin when establishing trust
  • b535924 Update ipa_sam.c
  • c842d4b trust-fetch-domains: use custom krb5.conf overlay for all trust operations
  • 9f63afb use a constant instead of /var/lib/sss/keytabs

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

3 years ago

Login to comment on this ticket.

Metadata