URL:
https://github.com/SSSD/sssd/pull/552
Title: #552: GPO: Store security CSE settings of all applicable GPOs
mzidek-rh commented:
"""
Hi,
I would personally close this PR and open an RFE ticket on Pagure (actually just did it
https://pagure.io/SSSD/sssd/issue/3712). I still think there is some value in implementing
this (because it would simplify Group Policy management in some cases and a lot of people
intuitively expect SSSD to merge the SIDs).
When it comes to the implementation in this patch, I do not like that it was implemented
on sysdb level. It would be better to merge the SIDs sooner and then just store the
resulting policy in sysdb the same way we do now. But I do not want @rdratlos to rework
the patches, because I do not want him or anyone else invest too much time into this when
we still do not know if this is something we want and it could end up as unsupported tech
preview feature (forever :) ). So, please write your opinions first in the pagure ticket
and then we will see.
Thanks,
Michal
"""
See the full comment at
https://github.com/SSSD/sssd/pull/552#issuecomment-382357595