On 03/18/2015 07:33 PM, Olivier wrote:
Thanks for your replies,

I found the ticket, that's why I asked : sounds to me a hard job to plan, especially now with DNSEC validation (and not sure that it would have a real added value)... A "natural" way for sssd if really a plan might be to catch zones from one of the ldap bakend available for bind ?

Anyway, the real reason I'm investigating : I'm distributing sudo rules with ldap and I want to use hostname to tell which host the rules appliy on. I have told in nsswitch.conf to query the DNS to find out the hostname but I'm not sure about how is collected the hostname from the dns in the checking process (especially if the machine has more than one interface) ? Is the label considered as being the hostname the reverse of the IP adress for the default interface ?

You know that you can use SSSD with sudo integration, right? SSSD will take care of this for you automatically.
http://www.freeipa.org/images/7/77/Freeipa30_SSSD_SUDO_Integration.pdf


Thanks for any guidance,

--
Olivier



2015-03-17 21:27 GMT+01:00 Jakub Hrozek <jhrozek@redhat.com>:
On Tue, Mar 17, 2015 at 02:46:32PM -0400, Dmitri Pal wrote:
> On 03/17/2015 12:56 PM, Lukas Slebodnik wrote:
> >On (17/03/15 17:26), Olivier wrote:
> >>Hi everyone,
> >>
> >>I was wondering if host requests caching is still part of sssd plans :
> >>https://fedorahosted.org/sssd/ticket/359
> >>
> >This ticket is in deferred section
> >which means that we do not plan to implement it in near future.
> >
> >But contribution is welcomed everytime and we can provide assistance.
> >
> >LS
> >_______________________________________________
> >sssd-devel mailing list
> >sssd-devel@lists.fedorahosted.org
> >https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
> Why do you need it? It is really bad idea to have hosts map.
> DNS is the way to do.

Right, this is the direction Fedora has been pushing.

In the meantime, you can still use nscd for the hosts map only.
_______________________________________________
sssd-devel mailing list
sssd-devel@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-devel



_______________________________________________
sssd-devel mailing list
sssd-devel@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-devel


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IdM portfolio
Red Hat, Inc.