Fields changed

description: Please allow users defined in one domain to acquire group memberships for groups defined in a separate domain.

[domain/kerb]
ldap_user_search_base = ou=People,ou=kerb,dc=foo
ldap_group_search_base = ou=Group,ou=kerb,dc=foo
id_provider = ldap
auth_provider = krb5
...

[domain/apps1]
ldap_user_search_base = ou=Account,ou=apps1,dc=foo
ldap_group_search_base = ou=Group,ou=apps1,dc=foo
id_provider = ldap
...

A user defined in [domain/kerb] may be a member of a group defined in [domain/apps1] using RFC2307 schema and LDAP attribute memberUid. => Please allow users defined in one domain to acquire group memberships for groups defined in a separate domain.

{{{
[domain/kerb]
ldap_user_search_base = ou=People,ou=kerb,dc=foo
ldap_group_search_base = ou=Group,ou=kerb,dc=foo
id_provider = ldap
auth_provider = krb5
...

[domain/apps1]
ldap_user_search_base = ou=Account,ou=apps1,dc=foo
ldap_group_search_base = ou=Group,ou=apps1,dc=foo
id_provider = ldap
...
}}}

A user defined in [domain/kerb] may be a member of a group defined in [domain/apps1] using RFC2307 schema and LDAP attribute memberUid.

Fields changed

milestone: NEEDS_TRIAGE => SSSD Deferred
owner: somebody => sgallagh

Marking this as a duplicate of ticket #868.

If we fix this problem, we're going to do it correctly by supporting multiple search bases instead of trying to force a workaround into place.

resolution: => duplicate
status: new => closed

Fields changed

rhbz: => 0

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1901

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.