On Mon, 2012-03-19 at 09:16 +0100, Jakub Hrozek wrote:
On Mon, Mar 19, 2012 at 06:24:53PM +1100, Greg.Lehmann(a)csiro.au
wrote:
> Wondering about whether this feature exists or is planned to exist? It is
> for use in a shared administration environment. We have central
> administration and local administrators. It would allow a central
> configuration for sssd with local changes. Puppet could manage the central
> main file and include a user managed portion. We handle sudoers in a
> similar way. I guess the main use of this might be to allow local admins
> to control who can login to a server. sssd.conf could include something
> like this:
>
>
>
> access_provider = simple
>
> simple_allow_groups = central_admins
>
>
>
> and the included locally managed file could have
>
>
>
> simple_allow_users = user01, user03, user42
>
>
>
> I know we can do this in other ways with puppet, but this would be simpler
> and it seems to me an include feature might have other uses.
>
>
Hi, this enhancement is tentatively scheduled for 1.11:
https://fedorahosted.org/sssd/ticket/1165
This request is subtly different. I opened a new ticket,
https://fedorahosted.org/sssd/ticket/1264 to track this.