Blame SOURCES/0103-sudo-search-with-view-even-if-user-is-found.patch

6cf099
From f69e9a566540896682c1021de92e5eec6a95dd9d Mon Sep 17 00:00:00 2001
6cf099
From: =?UTF-8?q?Pavel=20B=C5=99ezina?= <pbrezina@redhat.com>
6cf099
Date: Sun, 11 Oct 2015 17:38:34 +0200
6cf099
Subject: [PATCH 103/104] sudo: search with view even if user is found
6cf099
6cf099
If an overriden name is provided and the user is already cache we fail
6cf099
to refresh it since we won't search with VIEW flag. This patch fix
6cf099
it.
6cf099
6cf099
Reviewed-by: Sumit Bose <sbose@redhat.com>
6cf099
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
6cf099
(cherry picked from commit 51a0e3a2ef9186d19cbc28d87fe6fc5d5998a0a7)
6cf099
---
6cf099
 src/responder/sudo/sudosrv_get_sudorules.c | 5 ++++-
6cf099
 1 file changed, 4 insertions(+), 1 deletion(-)
6cf099
6cf099
diff --git a/src/responder/sudo/sudosrv_get_sudorules.c b/src/responder/sudo/sudosrv_get_sudorules.c
6cf099
index a0b09e69b71f963c353c9c6331c0708cc364924c..cc06977d97e3319584251bdab26e85855d275e8a 100644
6cf099
--- a/src/responder/sudo/sudosrv_get_sudorules.c
6cf099
+++ b/src/responder/sudo/sudosrv_get_sudorules.c
6cf099
@@ -160,7 +160,10 @@ static errno_t sudosrv_get_user(struct sudo_dom_ctx *dctx)
6cf099
         if ((user->count == 0 || cache_expire < time(NULL))
6cf099
             && dctx->check_provider) {
6cf099
 
6cf099
-            if (DOM_HAS_VIEWS(dom) && user->count == 0) {
6cf099
+            if (DOM_HAS_VIEWS(dom) && (user->count == 0
6cf099
+                    || ldb_msg_find_attr_as_string(user->msgs[0],
6cf099
+                                                   OVERRIDE_PREFIX SYSDB_NAME,
6cf099
+                                                   NULL) != NULL)) {
6cf099
                 extra_flag = EXTRA_INPUT_MAYBE_WITH_VIEW;
6cf099
             }
6cf099
 
6cf099
-- 
6cf099
2.4.3
6cf099