Thanks for all the replies. Very helpful!
Regards,
Yassir.
----- Original Message -----
On 01/22/2014 09:54 AM, Simo Sorce wrote:
> On Tue, 2014-01-21 at 20:36 -0500, Dmitri Pal wrote:
>> On 01/21/2014 07:08 PM, Yassir Elley wrote:
>>> It seems that the only network protocols used by SSSD are LDAP, KRB5, and
>>> DNS. On the other hand, Samba makes RPC calls all over the place (for
>>> authentication, etc).
>>>
>>> * Does sssd make any RPC calls (e.g. when interacting with a Domain
>>> Controller)?
>> The global catalog part uses RPC for example.
> No it doesn't, it is LDAP just on a different port :)
>
>>> * Does Microsoft require clients to use RPC calls to access certain DC
>>> functionality?
>> Yes.
> No, not really, just for client to perform all the basic functions you
> should be able to use just LDAP, DNS and Krb, however some
> administrative operations may still require RPC, also things like
> downloading Group Policy require a CIFS share.
>
>>> * If not, why does Samba use RPC calls rather than LDAP/KRB5?
> Because of its legacy nature, Samba was born in NT style domains where
> RPC calls were the only thing available. Some things have been changed
> to use LDAP/Krb when available but samba still falls back to RPC if
> something goes wrong on those protocols anyway.
>
>> AFAIK SSSD does use it, not to the same extent as winbind but it does.
> SSSD does not have any RPC support at the moment.
>
>> Some of the functionality like global catalog is available only via RPC.
> Nope, GC is just LDAP.
>
> Simo.
>
Hm, thanks for the education.
--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
_______________________________________________
sssd-devel mailing list
sssd-devel(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-devel