I think the cleanest solution would be to make "autofs_provider = ad" working
while expecting the true automount schema (rfc2307bis) on the AD side.
I can always remap it to my NIS schema as I do now....
O.
________________________________________
From: sssd-users-bounces(a)lists.fedorahosted.org
[sssd-users-bounces(a)lists.fedorahosted.org] on behalf of Ondrej Valousek
Sent: Thursday, April 10, 2014 11:21 AM
To: End-user discussions about the System Security Services Daemon
Subject: Re: [SSSD-users] Announcing SSSD 1.11.5
As far as I know there is no "default for AD" as I do knot know of anyone else
using SSSD with the AD backend for autofs integration :/.
The fact is that AD has RFC2307 (i.e. NIS schema) already built in (for the use of its
"server for NIS") so my approach is more/less "least pain" option :).
Ondrej
________________________________________
From: sssd-users-bounces(a)lists.fedorahosted.org
[sssd-users-bounces(a)lists.fedorahosted.org] on behalf of Jakub Hrozek
[jhrozek(a)redhat.com]
Sent: Thursday, April 10, 2014 10:50 AM
To: sssd-users(a)lists.fedorahosted.org
Subject: Re: [SSSD-users] Announcing SSSD 1.11.5
On Thu, Apr 10, 2014 at 08:28:21AM +0000, Ondrej Valousek wrote:
Thanks Jakub,
Is the link to the schema mentioned somewhere? I can not find it on the wiki page of the
project.
As of the automounter, I would vote for using RFC2307 automounter schema when dealing
with the AD.
I.e. the following mapping:
ldap_autofs_entry_key = cn
ldap_autofs_entry_object_class = nisObject
ldap_autofs_entry_value = nisMapEntry
ldap_autofs_map_name = nisMapName
ldap_autofs_map_object_class = nisMap
The advantage is that:
- RFC2307 is still a standard 9albeit bit older than RFC2307bis)
- you do not have to extend the AD schema for this (which could be a troublesome
operation in many companies)
And besides, I am using this configuration happily for quite some time :)
Ondrej
See
https://fedorahosted.org/sssd/wiki/DesignDocs/AutofsIntegration#TheLDAPsc...
So you're using the "NIS schema" which we currently don't have a
shorthand for. We could make that the default for AD, but is this
combination used commonly for AD autofs or just in your setup?
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users