On 05/29/2012 11:01 AM, Jakub Hrozek wrote:
On Tue, May 29, 2012 at 09:00:36AM -0800, Erinn Looney-Triggs wrote:
> The bit that seems to hang for me is when it comes to the
> ldap_sudo_search_base, the blog doesn't state explicitly that it should
> go in the domain section of sssd.conf, but the feature page does
I've seen other users trip over this, just that time it was
ldap_autofs_search_base. I thought it was natural to put the search base
in the domain section, do you feel we should improve the documentation
somewhat and state it more explicitly that even the application-specific
search bases go to the domain section?
I suspect we are talking about two different classes of users, those who
want it just to work (by following the instructions), and those who have
a larger understanding of things. When it comes to SSSD I am probably
somewhere between those two. it "seemed" like it should go in the domain
section but because it wasn't working (the quoting issue), and because
there was a discrepancy between the blog and the feature page, I
couldn't figure out if the location of the statement was the issue.
For most folks who just want it to work more explicit is the answer,
yeah it seems like it should go in the domain section though. And if I
had a dollar for every time I did something on a computer that seemed
like it should work and then didn't, well I would probably be sending
this e-mail from my beach villa, or not at all :).
-Erinn