[Freeipa-devel] [PATCH] Filter groups in the PAC

[Martin Kosek]

On 06/27/2012 06:28 PM, Alexander Bokovoy wrote:
> On Tue, 26 Jun 2012, Sumit Bose wrote:
>> Hi,
>>
>> this patch contains the KDC part of the external groups handling. If
>> group SIDs from the PAC can be found in the ipaExternalGroup objects and
>> the external groups are member of local groups, the SIDs of the local
>> groups are added to the PAC. If the PAC this then read by the SSSD pac
>> responder the user from the PAC is added to the local groups on the
>> client.
> ACK. There were code-related comments from Simo yesterday on IRC but it
> was agreed to solve those in separate patches.
> 

Pushed to master.

Martin