On Thu, May 28, 2015 at 11:23:23AM +0200, Pavel Reichl wrote:
On 05/28/2015 10:34 AM, Jakub Hrozek wrote:
>On Wed, May 27, 2015 at 08:00:44PM +0200, Pavel Reichl wrote:
>>Hello,
>>
>>please see design page for simple - RFE: Do not always override home
>>directory with subdomain_homedir value in server mode.
>>
>>https://fedorahosted.org/sssd/wiki/DesignDocs/use_AD_homedir
>>
>>**************************************************************************
>>**************************************************************************
>>**************************************************************************
>>
>>= Do not always override home directory with subdomain_homedir value in
>>server mode =
>>
>>Related ticket(s):
>> *
https://fedorahosted.org/sssd/ticket/2583
>>
>>=== Problem statement ===
>>Prior to sssd 1.12, we didn't have the ability to read home directory values
>>from AD in AD-IPA trust setups at all. Instead, we always used the
>>`subdomain_homedir` value. We can read custom LDAP values now, but in order
>>to stay backwards-compatible, we kept using the `subdomain_homedir` value.
>>
>>=== Use cases ===
>>Users from AD with POSIX attributes want to use individually set value for
>>home directory.
>>
>>=== Overview of the solution ===
>>`subdomain_homedir` for SSSD in server mode should support '%o' template
>>expansion (The original home directory retrieved from the identity
>>provider). In case when `subdomain_homedir` would be expanded to an empty
>>string ('subdomain_homedir=%o' and AD user without POSIX attributes)
SSSD
>>should not error out but `fallback_homedir` should be utilized instead.
>Are you proposing to change the default of subdomain_homedir from /home/%d/%u
>to /home/%o as well? I think we can do that in a major release if we
>properly document the change, but I think then fallback_homedir in IPA
>server mode should be changed to /home/%d/%u at the same time.
No I'm not proposing such change. But I like it and I can add it do design
page and implement it.
Let's discuss it on the meeting today (and then circle back to the list
so everything is recorded)
I would do that in a separate patch so we can delay
release of this change for a major release as you proposed. Does this work
for you?
By major release I mean 1.13 :-) But yes, this should be a separate
change.