[SSSD] [PATCH] fix nested groups
Jenny Galipeau
jgalipea at redhat.com
Fri Dec 4 14:05:27 UTC 2009
David O'Brien wrote:
> David O'Brien wrote:
>
>> Simo Sorce wrote:
>>
>>> On Wed, 2009-12-02 at 16:27 -0500, Jenny Galipeau wrote:
>>>
>>>> Hey, can you give me these scenarios? I have automated tests that
>>>> check
>>>> that member and memberof attributes are removed when associated
>>>> groups
>>>> and or user members are deleted. I would like to expand these tests
>>>> for regression testing of the problem.
>>>>
>>> Ah yes very easy to test actually.
>>>
>>> This is the test I used:
>>> Create 5 groups A,B,C,D,E
>>> Create 5 users a,b,c,d,e
>>> Add each user to the corresponding group then add each group to another,
>>> this is the tree I end up with:
>>>
>>> BEWARE!! ASCII art follows :)
>>>
>>> A--a
>>> |
>>> \--B--b
>>> |
>>> \--C--c
>>> |
>>> \--D--d
>>> |
>>> \--E--e
>>>
>>> Therefore the memberof attrs for each user are:
>>>
>>> a -> A
>>> b -> A,B
>>> c -> A,B,C
>>> d -> A,B,C,D
>>> e -> A,b,C,D,E
>>>
>>>
>>> now delete group C
>>>
>>> the results must be:
>>>
>>> a -> A
>>> b -> A,B
>>> c -> none
>>> d -> D
>>> e -> D,E
>>>
>>> If they are different there is a bug.
>>>
>>> Simo.
>>>
>>>
>>>
>>>
>>>
>> How can I determine which groups are members of which other groups?
>>
>> I created GroupA and GroupB, making B a member of A
>> I created UserA and UserB, making them members of obvious groups.
>>
>> # getent -s sss group
>> GroupA:*:511:UserA,UserB
>> GroupB:*:512:UserB
>>
>> That's fine, but how do I know that UserB is a member of GroupA only
>> because of group nesting?
>>
>> thanks
>>
>>
> And, use cases for group nesting? Why is it a good thing?
>
>
Nesting groups same a ton of administrative time. You only have to add a
user to the child group and the user is a member of all parent groups.
Rather than having to add the user to each group individually.
~Jenny
--
Jenny Galipeau <jgalipea at redhat.com>
Principal Software QA Engineer
Red Hat, Inc. Security Engineering
Register now for Red Hat Virtual Experience, December 9.
Enterprise Linux, virtualization, cloud, and more.
http://www.redhat.com/virtualexperience
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
More information about the sssd-devel
mailing list