Blame SOURCES/0003-ad-add-required-cn-attribute-to-subdomain-object.patch

b71eec
From bf6059eb55c8caa3111ef718db1676c96a67c084 Mon Sep 17 00:00:00 2001
b71eec
From: Sumit Bose <sbose@redhat.com>
b71eec
Date: Thu, 16 Dec 2021 11:14:18 +0100
b71eec
Subject: [PATCH] ad: add required 'cn' attribute to subdomain object
b71eec
MIME-Version: 1.0
b71eec
Content-Type: text/plain; charset=UTF-8
b71eec
Content-Transfer-Encoding: 8bit
b71eec
b71eec
If the forest root is not part of the return trusted domain objects
b71eec
from the local domain controller we generate an object for further
b71eec
processing. During this processing it is expected that the 'cn'
b71eec
attribute is set and contains the name of the forest root. So far this
b71eec
attribute was missing and it is now added by this patch.
b71eec
b71eec
Resolves: https://github.com/SSSD/sssd/issues/5926
b71eec
b71eec
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
b71eec
---
b71eec
 src/providers/ad/ad_subdomains.c | 7 +++++++
b71eec
 1 file changed, 7 insertions(+)
b71eec
b71eec
diff --git a/src/providers/ad/ad_subdomains.c b/src/providers/ad/ad_subdomains.c
b71eec
index 0353de76f..0c3f8ac31 100644
b71eec
--- a/src/providers/ad/ad_subdomains.c
b71eec
+++ b/src/providers/ad/ad_subdomains.c
b71eec
@@ -1646,6 +1646,13 @@ static void ad_check_root_domain_done(struct tevent_req *subreq)
b71eec
         goto done;
b71eec
     }
b71eec
 
b71eec
+    ret = sysdb_attrs_add_string(state->reply[0], AD_AT_DOMAIN_NAME,
b71eec
+                                 state->forest);
b71eec
+    if (ret != EOK) {
b71eec
+        DEBUG(SSSDBG_OP_FAILURE, "sysdb_attrs_add_string() failed.\n");
b71eec
+        goto done;
b71eec
+    }
b71eec
+
b71eec
     err = sss_idmap_sid_to_bin_sid(state->idmap_ctx->map, id,
b71eec
                                    &id_val.data, &id_val.length);
b71eec
     if (err != IDMAP_SUCCESS) {
b71eec
-- 
b71eec
2.26.3
b71eec