ehlo,
The sss nss plugin is present in nsswitch by default due to glibc caching
and problem with long living applications (e.g. GNOME). The SSSD nss plugin
should behave as if it was functioning but had no data even thought sssd is not
running. The errors have to be passed from nss plugin up to the user with
minimal moidiffication.
Resolves:
https://fedorahosted.org/sssd/ticket/2439
How to test:
* minimal installation of fedora/rhel7 should already contain sss
in /etc/nsswitch.
* grep sss /etc/nsswitch
* package sssd-client should be installed on machine
* test glibc functions whether ther return 0 for nonexisting group.
(there is attached file sssd_error_code_test.c for lazy people :-)
* the same return code should be with and without sss in /etc/nsswitch.conf
authconfig --disablesssd --update
authconfig --enablesssd --update
NOTE: I just patched functions which returned non-zero return code with stopped
sssd, because initgroups, getservent_r, getnetgrent_r returned 0 even with sss
in nsswitch.
There is also alternative solution from Stephen Gallagher which I found after
writing my patch :-)
https://bugzilla.redhat.com/attachment.cgi?id=788567
LS