freeipa/daemons
Alexander Bokovoy f8dcd78873 sidgen: ignore staged users when generating SIDs
Staged users have

  uidNumber: -1
  gidNumber: -1
  ipaUniqueID: autogenerate

We cannot generate ipaSecurityIdentifier based on those UID/GID numbers.
However, '-1' value will trigger an error

 find_sid_for_ldap_entry - [file ipa_sidgen_common.c, line 483]: ID value too large.

And that, in turn, will cause stopping SID generation for all users.

Detect 'ipaUniqueID: autogenerate' situation and ignore these entries.

Fixes: https://pagure.io/freeipa/issue/9517

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
2024-01-30 16:25:29 +01:00
..
dnssec pylint: remove useless suppression 2023-01-10 08:30:58 +01:00
ipa-kdb ipa-kdb: Fix memory leak during PAC verification 2024-01-30 07:50:19 +01:00
ipa-otpd ipa-otpd: add passkey_child_debug_level option 2023-06-01 08:20:37 +02:00
ipa-sam ipasam: make krbtgt TDO principal canonical 2024-01-23 13:19:37 +01:00
ipa-slapi-plugins sidgen: ignore staged users when generating SIDs 2024-01-30 16:25:29 +01:00
ipa-version.h.in Build: move version handling from Makefile to configure 2016-11-09 13:08:32 +01:00
Makefile.am build: Unify compiler warning flags used 2021-01-15 14:11:56 +01:00