Re: [SSSD] [PATCH] PAC: Skip SIDs that cannot be resolved to domain

2013-08-26 Thread Jakub Hrozek
On Mon, Aug 26, 2013 at 11:31:06AM +0200, Jakub Hrozek wrote: > On Mon, Aug 26, 2013 at 11:17:20AM +0200, Sumit Bose wrote: > > On Mon, Aug 26, 2013 at 10:19:25AM +0200, Jakub Hrozek wrote: > > > Hi, > > > > > > attached is a small patch I prepared when testing the PAC responder > > > patches. In

Re: [SSSD] [PATCH] PAC: Skip SIDs that cannot be resolved to domain

2013-08-26 Thread Jakub Hrozek
On Mon, Aug 26, 2013 at 11:17:20AM +0200, Sumit Bose wrote: > On Mon, Aug 26, 2013 at 10:19:25AM +0200, Jakub Hrozek wrote: > > Hi, > > > > attached is a small patch I prepared when testing the PAC responder > > patches. In my case, the user was a member of a well-known SID S-1-18-1 > > which didn

Re: [SSSD] [PATCH] PAC: Skip SIDs that cannot be resolved to domain

2013-08-26 Thread Sumit Bose
On Mon, Aug 26, 2013 at 10:19:25AM +0200, Jakub Hrozek wrote: > Hi, > > attached is a small patch I prepared when testing the PAC responder > patches. In my case, the user was a member of a well-known SID S-1-18-1 > which didn't resolve into a domain and all his groups were skipped. I > think we s

[SSSD] [PATCH] PAC: Skip SIDs that cannot be resolved to domain

2013-08-26 Thread Jakub Hrozek
Hi, attached is a small patch I prepared when testing the PAC responder patches. In my case, the user was a member of a well-known SID S-1-18-1 which didn't resolve into a domain and all his groups were skipped. I think we should just skip the offending SID and carry on. >From ce3b5bac3449abda1158