mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-10-26 07:00:07 -05:00
Florence Blanc-Renaud
3a9a5bdae7
The command ipa idview-show NAME has a post callback method that replaces the ID override anchor with the corresponding user name. For instance the anchor ipaanchoruuid=:SID:S-1-5-21-3951964782-819614989-3867706637-1114 is replaced with the name of the ad user aduser@ad.test. The method loops on all the anchors and for each one performs the resolution, which can be a costly operation if the anchor is for a trusted user. Instead of doing a search for each anchor, it is possible to read the 'ipaOriginalUid' value from the ID override entry. Fixes: https://pagure.io/freeipa/issue/9372 Signed-off-by: Florence Blanc-Renaud <flo@redhat.com> Reviewed-By: Rob Crittenden <rcritten@redhat.com> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>