URL: https://github.com/SSSD/sssd/pull/879 Title: #879: ipa: use LDAP not extdom to lookup IPA users and groups
sumit-bose commented: """ Hi, I think the most easy reproducer with IPA is to add an AD user to one or more IPA groups. Then do 'id aduser@ad.domain' on an IPA client with an empty cache. When inspecting the domain logs you should see that all AD objects are looked up with the extdom plugin but the IPA groups are read with ldapsearch. HTH bye, Sumit """ See the full comment at https://github.com/SSSD/sssd/pull/879#issuecomment-529437812
_______________________________________________ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org