On Fri, Nov 08, 2013 at 04:41:00PM +0100, Michal Židek wrote:
NOTE:
This is the first wave of sysdb refactoring effort. Other sysdb
changes will follow, including ticket
https://fedorahosted.org/sssd/ticket/2129
(Always store users with FQDN with hardcoded format), which is
change that should simplify handling of 'name' attribute and avoid
code patterns like this:
Replying mostly to make sure what Michal said is discussed thoroughly.
What we're proposing is that users are stored as:
name=jhrozek(a)redhat.com,cn=users,cn=redhat.com,cn=sysdb
instead of:
name=jhrozek,cn=users,cn=redhat.com,cn=sysdb
There are two big problems in how we store the entries right now:
1) Users from subdomains are stored using a fully-qualified name in RDN while
users from primary domains are stored using just the username in RDN.
2) The FQDN format we use to store the users is derived from the
`full_name_format` configuration directive. This means the RND format
is configurable...
We propose to change the RDN to always be the FQDN. Whether the name
attribute is converted to FQDN or there is a new attribute that stores
the FQDN and we keep the username is the "name" attribute is subject to
discussion.