On Tue, Jan 21, 2014 at 07:08:55PM -0500, Yassir Elley wrote:
It seems that the only network protocols used by SSSD are LDAP, KRB5,
and DNS. On the other hand, Samba makes RPC calls all over the place (for authentication,
etc).
* Does sssd make any RPC calls (e.g. when interacting with a Domain Controller)?
to make it clear, SSSD does not do any RPC calls. We discussed this
quite a bit because for some information it is easier to use one RPC
call instead of multiple LDAP searches. But finally we decided to sick
with LDAP and Kerberos (the PAC is a useful source of information as
well).
* Does Microsoft require clients to use RPC calls to access certain
DC functionality?
* If not, why does Samba use RPC calls rather than LDAP/KRB5?
With SSSD we were free to decide which version of Windows DCs we want to
support and which not. Samba tries to work well with all versions and
since RPC exists longer in Windows than AD from the Samba perspective it
makes often sense to use RPC to cover all versions at once.
HTH
bye,
Sumit
Regards,
Yassir.
_______________________________________________
sssd-devel mailing list
sssd-devel(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-devel