{"action":"created","issue":{"url":"https://api.github.com/repos/SSSD/sssd/issues/7","repository_url":"https://api.github.com/repos/SSSD/sssd","labels_url":"https://api.github.com/repos/SSSD/sssd/issues/7/labels{/name}","comments_url":"https://api.github.com/repos/SSSD/sssd/issues/7/comments","events_url":"https://api.github.com/repos/SSSD/sssd/issues/7/events","html_url":"https://github.com/SSSD/sssd/pull/7","id":174063174,"number":7,"title":"Fix initgroups with nested groups","user":{"login":"sumit-bose","id":15247317,"avatar_url":"https://avatars.githubusercontent.com/u/15247317?v=3","gravatar_id":"","url":"https://api.github.com/users/sumit-bose","html_url":"https://github.com/sumit-bose","followers_url":"https://api.github.com/users/sumit-bose/followers","following_url":"https://api.github.com/users/sumit-bose/following{/other_user}","gists_url":"https://api.github.com/users/sumit-bose/gists{/gist_id}","starred_url":"https://api.github.com/users/sumit-bose/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sumit-bose/subscriptions","organizations_url":"https://api.github.com/users/sumit-bose/orgs","repos_url":"https://api.github.com/users/sumit-bose/repos","events_url":"https://api.github.com/users/sumit-bose/events{/privacy}","received_events_url":"https://api.github.com/users/sumit-bose/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-08-30T16:19:55Z","updated_at":"2016-08-30T19:36:19Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/SSSD/sssd/pulls/7","html_url":"https://github.com/SSSD/sssd/pull/7","diff_url":"https://github.com/SSSD/sssd/pull/7.diff","patch_url":"https://github.com/SSSD/sssd/pull/7.patch"},"body":"I think this is a leftover from the change to use fully-qualified names in\nsysdb. To verify this you can create a nested group in IPA. Without this patch\nthe id command will only show the groups the user is a direct member of. With\nthe patch the indirect groups memberships should be shown as well."},"comment":{"url":"https://api.github.com/repos/SSSD/sssd/issues/comments/243553980","html_url":"https://github.com/SSSD/sssd/pull/7#issuecomment-243553980","issue_url":"https://api.github.com/repos/SSSD/sssd/issues/7","id":243553980,"user":{"login":"jhrozek","id":715522,"avatar_url":"https://avatars.githubusercontent.com/u/715522?v=3","gravatar_id":"","url":"https://api.github.com/users/jhrozek","html_url":"https://github.com/jhrozek","followers_url":"https://api.github.com/users/jhrozek/followers","following_url":"https://api.github.com/users/jhrozek/following{/other_user}","gists_url":"https://api.github.com/users/jhrozek/gists{/gist_id}","starred_url":"https://api.github.com/users/jhrozek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jhrozek/subscriptions","organizations_url":"https://api.github.com/users/jhrozek/orgs","repos_url":"https://api.github.com/users/jhrozek/repos","events_url":"https://api.github.com/users/jhrozek/events{/privacy}","received_events_url":"https://api.github.com/users/jhrozek/received_events","type":"User","site_admin":false},"created_at":"2016-08-30T19:36:19Z","updated_at":"2016-08-30T19:36:19Z","body":"On Tue, Aug 30, 2016 at 11:47:09AM -0700, lslebodn wrote:\n> Please provide a test-case (probably a hierarchy of groups)\n\nI was able to reproduce with:\n$ ipa group-show group20\n  Group name: group20\n  GID: 935600011\n  Member groups: group10, group11\n  Indirect Member users: user1\n$ ipa group-show group10\n  Group name: group10\n  GID: 935600008\n  Member users: user1\n  Member of groups: group20\n$ ipa group-show group11\n  Group name: group11\n  GID: 935600009\n  Member users: user1\n  Member of groups: group20\n\nBefore the patch, group20 wasn't resolved, after the patch it was.\n\nbtw I had this group hierarhcy pre-created on my test IPA server which makes me wonder a bit how we didn't see this bug before, I'm sure I created it\nfor some reason. Also I'm surprised a lot none of the downstream tests we\nwere running caught the bug.\n\nAbout the discussion I saw on #sssd in backscroll, the rfc2307bis schema\nonly uses the member attribute because IIRC the RFC doesn't talk about\nmemberof at all. But in IPA, we know the specifics on the schema, so we\nare able to dereference the memberof attribute to get a complete list of\nall groups with one call.\n"}}
{"actor":{"display_login":"jhrozek"}}