[SSSD] domain vs provider in SSSD

Stephen Gallagher sgallagh at redhat.com
Mon Nov 2 12:14:22 UTC 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 11/02/2009 12:43 AM, David O'Brien wrote:
>  From what I've read, these two are equivalent. Should I be using one 
> term in one place and the other elsewhere or doesn't it matter?
> 

Domains and providers are NOT the same thing. A domain is a conceptual
object that contains one or more providers. For example, an IPA domain
is actually a domain with an ID provider of LDAP and an authentication
provider of Kerberos.

These terms must not be used interchangeably. In some communications, we
refer to an "LDAP domain", but in these examples, we're usually talking
about a domain that uses LDAP for all the provider types (ID, AUTH,
ACCESS and CHPASS)

A provider on the other hand is a connection to the remote (or local)
data store.

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkruzR4ACgkQeiVVYja6o6OPIgCdGru/NkCsjk/zII3Ik6TnTkSM
pVEAoJhNYi23F5vh/rwO1oKs+QDts5fb
=McyP
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list