[Freeipa-users] Patch for ipa-sam: ipa-server-trust-ad samba server valid users =@groupname

[Jason Woods]

Hi,

On 6.3.2014 23:06, Alexander Bokovoy wrote:
> For the record, it is ipa-adtrust-install --add-sids and the task is
> called sidgen task.

Absolutely. Sorry for the confusion - too late and swimming in the code had me mix up the terminology :-) All sorted for the bugzilla ticket.

On 6.3.2014 23:06, Alexander Bokovoy wrote:
> Since we are comparing values of the attribute, we are on our own and
> cannot rely on attribute name canonicalization here. This means
> strncasecmp() is for the job. I've looked at other options like using
> ber_bvcmp() macro but we are really can't guarantee that objectClass
> attribute values are in any specific string case because the only matching
> rule defined for them is objectIdentifierMatch -- we would have
> to turn the value to oid first and then compare which is probably too
> much for this specific case.

Sure, I was thinking the simplest fix is probably the best fix. Thanks for the time to look over the problem!

On 7 Mar 2014, at 08.39, Petr Spacek <pspacek at redhat.com> wrote:
> On 6.3.2014 23:06, Alexander Bokovoy wrote:
>> This is valid bug. Could you please raise it in bugzilla.redhat.com or,
>> alternatively, at FreeIPA's trac?
> 
> To simply it for you:
> 
> The right place is
> https://bugzilla.redhat.com/enter_bug.cgi?product=Red%20Hat%20Enterprise%20Linux%206

All done and raised, hopefully with enough information, at: https://bugzilla.redhat.com/show_bug.cgi?id=1073829

Thanks for you time!

Regards,

Jason