On Wed, Feb 25, 2015 at 03:24:32PM -0500, Dmitri Pal wrote:
On 02/25/2015 02:13 PM, Jakub Hrozek wrote:
>Hi,
>
>I wrote up design for the wildcard DP requests:
>
https://fedorahosted.org/sssd/wiki/DesignDocs/WildcardRefresh
>
>For convenience, the design is also copied below. I have one main
>question - do we need to support the wildcard requests also for AD users
>coming via the extdom plugin? If so, that would require larger changes
>to the plugin as well as the SSSD running in server mode.
>
>I think Jan can help us answer this question -- do we need the
>ListUsersByName methods to return AD users on IPA clients in setups with
>trusts or is it OK for now to only return IPA users on IPA clients and AD
>users on AD clients?
Well the whole point is to be able to return users from different domains
regardless of the source and trust relations.
But stay tuned for other conversation before diving into this.
With the proposal we can do IPA users, LDAP users and AD users from both
main domain and subdomain. We can't do AD users on IPA clients, we need
to modify the extdom plugin for that.
Anyway, the potential extop plugin work doesn't conflict with the rest
of the proposal, so we can go ahead with what's below (if agreed) and
implement the extdom modifications separately (or in parallel).
It's mostly a matter of us agreeing on the scope and priorities.