[SSSD] [PATCH] fix nested groups

Jenny Galipeau jgalipea at redhat.com
Fri Dec 4 14:05:27 UTC 2009


David O'Brien wrote:
> David O'Brien wrote:
>   
>> Simo Sorce wrote:
>>     
>>> On Wed, 2009-12-02 at 16:27 -0500, Jenny Galipeau wrote:
>>>       
>>>> Hey, can you give me these scenarios?  I have automated tests that
>>>> check 
>>>> that member and memberof attributes are removed when associated
>>>> groups 
>>>> and or user members are deleted.   I would like to expand these tests 
>>>> for regression testing of the problem.
>>>>         
>>> Ah yes very easy to test actually.
>>>
>>> This is the test I used:
>>> Create 5 groups A,B,C,D,E
>>> Create 5 users a,b,c,d,e
>>> Add each user to the corresponding group then add each group to another,
>>> this is the tree I end up with:
>>>
>>> BEWARE!! ASCII art follows :)
>>>
>>> A--a
>>> |
>>> \--B--b
>>>    |
>>>    \--C--c
>>>       |
>>>       \--D--d
>>>          |
>>>          \--E--e
>>>
>>> Therefore the memberof attrs for each user are:
>>>
>>> a -> A
>>> b -> A,B
>>> c -> A,B,C
>>> d -> A,B,C,D
>>> e -> A,b,C,D,E
>>>
>>>
>>> now delete group C
>>>
>>> the results must be:
>>>
>>> a -> A
>>> b -> A,B
>>> c -> none
>>> d -> D
>>> e -> D,E
>>>
>>> If they are different there is a bug.
>>>
>>> Simo.
>>>
>>>
>>>
>>>
>>>       
>> How can I determine which groups are members of which other groups?
>>
>> I created GroupA and GroupB, making B a member of A
>> I created UserA and UserB, making them members of obvious groups.
>>
>> # getent -s sss group
>> GroupA:*:511:UserA,UserB
>> GroupB:*:512:UserB
>>
>> That's fine, but how do I know that UserB is a member of GroupA only 
>> because of group nesting?
>>
>> thanks
>>
>>     
> And, use cases for group nesting? Why is it a good thing?
>
>   
Nesting groups same a ton of administrative time. You only have to add a 
user to the child group and the user is a member of all parent groups. 
Rather than having to add the user to each group individually.
~Jenny


-- 
Jenny Galipeau <jgalipea at redhat.com>
Principal Software QA Engineer
Red Hat, Inc. Security Engineering

Register now for Red Hat Virtual Experience, December 9.
Enterprise Linux, virtualization, cloud, and more.
http://www.redhat.com/virtualexperience

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/ 




More information about the sssd-devel mailing list