[Freeipa-devel] [PATCH] Filter groups in the PAC

[Sumit Bose]

On Wed, Jun 27, 2012 at 07:28:11PM +0300, Alexander Bokovoy wrote:
> On Tue, 26 Jun 2012, Sumit Bose wrote:
> >Hi,
> >
> >this patch contains the KDC part of the external groups handling. If
> >group SIDs from the PAC can be found in the ipaExternalGroup objects and
> >the external groups are member of local groups, the SIDs of the local
> >groups are added to the PAC. If the PAC this then read by the SSSD pac
> >responder the user from the PAC is added to the local groups on the
> >client.
> ACK. There were code-related comments from Simo yesterday on IRC but it
> was agreed to solve those in separate patches.

Thank you for the review, I created
https://fedorahosted.org/freeipa/ticket/2881 for the discussed
performance improvements.

bye,
Sumit

> 
> -- 
> / Alexander Bokovoy