Handle the nss_initgroups_ignoreusers option in pynslcd

1 files changed, 8 insertions, 0 deletions

diff --git a/pynslcd/group.py b/pynslcd/group.py
index a72c57d..ee1d268 100644
--- a/pynslcd/group.py
+++ b/pynslcd/group.py
@@ -187,6 +187,14 @@ class GroupByMemberRequest(GroupRequest):
                         for result in self.convert(dn, attributes, parameters):
                             yield result
 
+    def handle_request(self, parameters):
+        # check whether requested user is in nss_initgroups_ignoreusers
+        if parameters['memberUid'] in cfg.nss_initgroups_ignoreusers:
+            # write the final result code to signify empty results
+            self.fp.write_int32(constants.NSLCD_RESULT_END)
+            return
+        return super(GroupByMemberRequest, self).handle_request(parameters)
+
 
 class GroupAllRequest(GroupRequest):