On Tue, 2014-01-21 at 20:36 -0500, Dmitri Pal wrote:
On 01/21/2014 07:08 PM, Yassir Elley wrote:
> It seems that the only network protocols used by SSSD are LDAP, KRB5, and DNS. On
the other hand, Samba makes RPC calls all over the place (for authentication, etc).
>
> * Does sssd make any RPC calls (e.g. when interacting with a Domain Controller)?
The global catalog part uses RPC for example.
No it doesn't, it is LDAP just on a different port :)
> * Does Microsoft require clients to use RPC calls to access
certain DC functionality?
Yes.
No, not really, just for client to perform all the basic functions you
should be able to use just LDAP, DNS and Krb, however some
administrative operations may still require RPC, also things like
downloading Group Policy require a CIFS share.
> * If not, why does Samba use RPC calls rather than LDAP/KRB5?
Because of its legacy nature, Samba was born in NT style domains where
RPC calls were the only thing available. Some things have been changed
to use LDAP/Krb when available but samba still falls back to RPC if
something goes wrong on those protocols anyway.
AFAIK SSSD does use it, not to the same extent as winbind but it
does.
SSSD does not have any RPC support at the moment.
Some of the functionality like global catalog is available only via
RPC.
Nope, GC is just LDAP.
Simo.
--
Simo Sorce * Red Hat, Inc * New York