[SSSD] domain vs provider in SSSD

Jenny Galipeau jgalipea at redhat.com
Mon Nov 2 13:52:29 UTC 2009


Stephen Gallagher wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 11/02/2009 12:43 AM, David O'Brien wrote:
>   
>>  From what I've read, these two are equivalent. Should I be using one 
>> term in one place and the other elsewhere or doesn't it matter?
>>
>>     
>
> Domains and providers are NOT the same thing. A domain is a conceptual
> object that contains one or more providers. For example, an IPA domain
> is actually a domain with an ID provider of LDAP and an authentication
> provider of Kerberos.
>
> These terms must not be used interchangeably. In some communications, we
> refer to an "LDAP domain", but in these examples, we're usually talking
> about a domain that uses LDAP for all the provider types (ID, AUTH,
> ACCESS and CHPASS)
>
> A provider on the other hand is a connection to the remote (or local)
> data store.
>   
I would have said exactly what Stephen said, here's an example sssd.conf 
with two LDAP Domains, just so you can visualize what it's configuration 
would look like ...

[sssd]
config_file_version = 2
domains = EXAMPLE1.COM, EXAMPLE2.COM
reconnection_retries = 3
services = nss, pam

[nss]
debug_level = 4
filter_groups = root
filter_users = root
reconnection_retries = 3

[pam]
reconnection_retries = 3

[domain/EXAMPLE1.COM]
cache_credentials = TRUE
enumerate = TRUE
id_provider = ldap
ldap_group_search_base = ou=groups,dc=example1,dc=com
ldap_uri = ldap://hostname.example1.com:389
ldap_user_search_base = ou=people,dc=example1,dc=com
max_id = 1010
min_id = 1000

[domain/EXAMPLE2.COM]
cache_credentials = TRUE
enumerate = TRUE
id_provider = ldap
ldap_group_search_base = ou=groups,dc=example2,dc=com
ldap_uri = ldap://hostname.example2.com:11329
ldap_user_search_base = ou=people,dc=example2,dc=com
max_id = 2010
min_id = 2000

> - -- 
> Stephen Gallagher
> RHCE 804006346421761
>
> Delivering value year after year.
> Red Hat ranks #1 in value among software vendors.
> http://www.redhat.com/promo/vendor/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkruzR4ACgkQeiVVYja6o6OPIgCdGru/NkCsjk/zII3Ik6TnTkSM
> pVEAoJhNYi23F5vh/rwO1oKs+QDts5fb
> =McyP
> -----END PGP SIGNATURE-----
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel
>
>   


-- 
Jenny Galipeau <jgalipea at redhat.com>
Principal Software QA Engineer
Red Hat, Inc. Security Engineering

Register now for Red Hat Virtual Experience, December 9.
Enterprise Linux, virtualization, cloud, and more.
http://www.redhat.com/virtualexperience

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/ 




More information about the sssd-devel mailing list