From 154d73a06f1eb1fda85da54034ad79ba9bcd485b Mon Sep 17 00:00:00 2001

From: Lukas Slebodnik <lslebodn@redhat.com>

Date: Wed, 22 Jan 2020 09:43:21 +0000

Subject: [PATCH] BE_REFRESH: Do not try to refresh domains from other backends

We cannot refresh domains from different sssd_be processes.

We can refresh just subdomains

Resolves:

https://pagure.io/SSSD/sssd/issue/4142

Merges: https://pagure.io/SSSD/sssd/pull-request/4139

Reviewed-by: Sumit Bose <sbose@redhat.com>

(cherry picked from commit 007d5b79b7aef67dd843ed9a3b65095faaeb580f)

---

 src/providers/be_refresh.c | 4 ++++

 1 file changed, 4 insertions(+)

diff --git a/src/providers/be_refresh.c b/src/providers/be_refresh.c

index 8fcfb86b4..fd63dae66 100644

--- a/src/providers/be_refresh.c

+++ b/src/providers/be_refresh.c

@@ -388,6 +388,10 @@ static errno_t be_refresh_step(struct tevent_req *req)

         if (state->index == BE_REFRESH_TYPE_SENTINEL) {

             state->domain = get_next_domain(state->domain,

                                             SSS_GND_DESCEND);

+            /* we can update just subdomains */

+            if (state->domain != NULL && !IS_SUBDOMAIN(state->domain)) {

+                break;

+            }

             state->index = 0;

             continue;

         }

-- 

2.21.3