-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 09/30/2010 12:03 PM, Sumit Bose wrote:
ok, then I understood it wrong. So your suggestion is to translate the
DNs to the corresponding CNs and return them together with the plain
names from memberNisNetgroup to glibc and do not do any nested group
unrolling in sssd.
I'm fine with this scheme. As mentioned earlier I think we should agree
on a basic solution for a start and should add optimizations based on
Use-Cases later.
Ok, just to summarize:
The plan will be that for ALL memberNisNetgroup entries, we will
normalize them as names of netgroups if they are DNs, and then we will
return all of them to glibc rather than attempting to internally resolve
them.
Is this an accurate summary?
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora -
http://enigmail.mozdev.org/
iEYEARECAAYFAkykwQQACgkQeiVVYja6o6NfjACgo1UboDr295tfZpBgciEREHit
DosAn3xvrAFVJ+HIUIp6S6iytoeBSQvn
=e9wu
-----END PGP SIGNATURE-----