On 03/18/2015 07:33 PM, Olivier wrote:
Thanks for your replies,
I found the ticket, that's why I asked : sounds to me a hard job to
plan, especially now with DNSEC validation (and not sure that it would
have a real added value)... A "natural" way for sssd if really a plan
might be to catch zones from one of the ldap bakend available for bind ?
Anyway, the real reason I'm investigating : I'm distributing sudo
rules with ldap and I want to use hostname to tell which host the
rules appliy on. I have told in nsswitch.conf to query the DNS to find
out the hostname but I'm not sure about how is collected the hostname
from the dns in the checking process (especially if the machine has
more than one interface) ? Is the label considered as being the
hostname the reverse of the IP adress for the default interface ?
You know that you can use SSSD with sudo integration, right? SSSD will
take care of this for you automatically.
http://www.freeipa.org/images/7/77/Freeipa30_SSSD_SUDO_Integration.pdf
Thanks for any guidance,
--
Olivier
2015-03-17 21:27 GMT+01:00 Jakub Hrozek <jhrozek(a)redhat.com
<mailto:jhrozek@redhat.com>>:
On Tue, Mar 17, 2015 at 02:46:32PM -0400, Dmitri Pal wrote:
> On 03/17/2015 12:56 PM, Lukas Slebodnik wrote:
> >On (17/03/15 17:26), Olivier wrote:
> >>Hi everyone,
> >>
> >>I was wondering if host requests caching is still part of sssd
plans :
> >>https://fedorahosted.org/sssd/ticket/359
> >>
> >This ticket is in deferred section
> >which means that we do not plan to implement it in near future.
> >
> >But contribution is welcomed everytime and we can provide
assistance.
> >
> >LS
> >_______________________________________________
> >sssd-devel mailing list
> >sssd-devel(a)lists.fedorahosted.org
<mailto:sssd-devel@lists.fedorahosted.org>
> >https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
> Why do you need it? It is really bad idea to have hosts map.
> DNS is the way to do.
Right, this is the direction Fedora has been pushing.
In the meantime, you can still use nscd for the hosts map only.
_______________________________________________
sssd-devel mailing list
sssd-devel(a)lists.fedorahosted.org
<mailto:sssd-devel@lists.fedorahosted.org>
https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
_______________________________________________
sssd-devel mailing list
sssd-devel(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.