On 04/17/2012 12:19 PM, Pavel Březina wrote:
This is what simo and I made up in the last few days:

https://fedorahosted.org/sssd/wiki/DesignDocs/SUDOCachingRules

I tried to go to the details so we can avoid further problems.
Please, review it and tell us what is not good or clear enough.

Thanks,
Pavel.
_______________________________________________
sssd-devel mailing list
sssd-devel@lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/sssd-devel

Should we also do per user smart updates when the user runs sudo?

Might be costly but probably should be an option. May be when user logs in.

Should we create a tool to force full refresh of the rules immediately?

Yes, eventually, but this can be deferred.

-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/