On Tue, Nov 22, 2016 at 08:51:10AM +0100, Jakub Hrozek wrote:
I was working on a KCM server for SSSD for some time already in parallel
with the files provider and had some discussions with Simo as well. Of
course my intent wasn't to implement a feature secretly without a design
review, but to have a prototype to base a proper design on :)
However it makes sense to have a peer-reviewed design page now, also
because of Fedora's move towards Kerberos and KDC proxy, which leads to
questions on the Fedora lists about ccache renewals and so on -- so I
think it makes sense to pitch the design to Fedora at least already..
Here is the design page:
and here is the code of the KCM responder so far:
I moved the design doc to pagure:
It's been cleaned up and reconciled with the implementation.