[Freeipa-devel] [PATCH] Filter groups in the PAC

[Alexander Bokovoy]

On Tue, 26 Jun 2012, Sumit Bose wrote:
>Hi,
>
>this patch contains the KDC part of the external groups handling. If
>group SIDs from the PAC can be found in the ipaExternalGroup objects and
>the external groups are member of local groups, the SIDs of the local
>groups are added to the PAC. If the PAC this then read by the SSSD pac
>responder the user from the PAC is added to the local groups on the
>client.
ACK. There were code-related comments from Simo yesterday on IRC but it
was agreed to solve those in separate patches.

-- 
/ Alexander Bokovoy