On 07/14/2015 04:37 AM, Sumit Bose wrote:
On Mon, Jul 13, 2015 at 06:06:17PM -0400, Frank Pikelner wrote:
> I just did a presentation at work to promote SSSD using the AD provider to replace an
older nss_ldap and pam_ldap solution.
>
> I have a question as someone had found a Red Hat document that suggested that
deployments should be limited to 30 clients. I'm not sure if this is a current
recommendation, but I'm interested if anyone has deployments with 5-10 thousand
clients using the AD provider?
I think the suggestion can be found in documents where the direct
integration into an AD domain/forest with the AD provider is compared
with using FreeIPA to manage the Linux clients and create a trust
relationship to the AD forest.
Since FreeIPA has more management capabilities with respect to Linux
clients than AD is it recommended to use FreeIPA and trust with a larger
number of Linux clients. But this only refers to the general management
of the Linux client and does not describe any limitation in the AD
provider.
This is one of the sources.
http://rhelblog.redhat.com/2015/05/27/direct-or-indirect-that-is-the-ques...
You can deploy thousands, up to you, but you really should consider IdM
as an interim solution in this case.
See other blog posts on the matter.
HTH
bye,
Sumit
> Frank
>
>
> _______________________________________________
> sssd-users mailing list
> sssd-users(a)lists.fedorahosted.org
>
https://lists.fedorahosted.org/mailman/listinfo/sssd-users
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users
--
Thank you,
Dmitri Pal
Director of Engineering for IdM portfolio
Red Hat, Inc.