On Fri, Apr 06, 2012 at 09:38:55AM +0200, Jan Zelený wrote:
> >
> > > Patch 0006: Retrieve subdomains if there is a request for fully
> > > qualified user
> > > Looks OK, will just need amendment when sss_dp_get_domains_recv() is
> > > implemented. Currently the patch supports users and netgroups, are
> > > there plans to also support services and the SSH responder? I think we
> > > can leave out the sudo responder for now, sudo doesn't support
domains
> > > (yet?). Autofs in theory can send a request for a fully-qualified map,
> > > but it doesn't so the work can be done later, although I would prefer
> > > a ticket to show that we are aware of the issue.
> >
> > The amendment has been done. About support of another responders - I
> > honestly don't know. I wasn't aware that a request for fully qualified
> > service/ssh entity can be given to SSSD. Perhaps Sumit will know more.
>
> ah, sorry, I think I haven't read patch 0006 to the end. We do not need
> netgroups for sub-domains. Only the user object is need for sub-domains
> (and a way to authenticate the user :-). All other things like access
> control and group memberships will be controlled by the local domain.
Does that mean that I should remove all those parts where we are requesting
various entities from subdomain?
yes, currently I can see no usage for netgroups here, but please keep
the changes in your subdomains-future branch. Maybe someone will find a
usecase later.
bye,
Sumit
Thanks
Jan