Commits on Dec 30, 2021

1. fix potential unwarranted memberships in nested groups from LDAP …

   - the issue was present only when using PHP based resolving of nested
     group members. Normally nested members are common in AD (and Samba4) and
     are resolved per LDAP_MATCHING_RULE_IN_CHAIN by default
   - resolving nested members is recursive
   - when the cache entry was created it happend for intermediate groups, too,
     containing members from the parent group
   - the check was added to only cache the root group with its members
   - a runtime cache stores intermediate ldap read results
   
   
   Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>

   

   blizzz authored and artonge committed Dec 30, 2021
   Configuration menu

   • View commit details
   • Copy full SHA for 55a27ea
   • Browse repository at this point

   Copy the full SHA

   55a27ea View commit details

   Browse the repository at this point in the history