[SSSD] domain vs provider in SSSD

David O'Brien davido at redhat.com
Tue Nov 3 00:42:05 UTC 2009


Stephen Gallagher wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On 11/02/2009 12:43 AM, David O'Brien wrote:
>>  From what I've read, these two are equivalent. Should I be using one 
>> term in one place and the other elsewhere or doesn't it matter?
>>
> 
> Domains and providers are NOT the same thing. A domain is a conceptual
> object that contains one or more providers. For example, an IPA domain
> is actually a domain with an ID provider of LDAP and an authentication
> provider of Kerberos.

ok, this is good. That helps a lot, thanks.

> 
> These terms must not be used interchangeably. In some communications, we
> refer to an "LDAP domain", but in these examples, we're usually talking
> about a domain that uses LDAP for all the provider types (ID, AUTH,
> ACCESS and CHPASS)
> 
> A provider on the other hand is a connection to the remote (or local)
> data store.
> 
> - -- 
> Stephen Gallagher
> RHCE 804006346421761
> 
> Delivering value year after year.
> Red Hat ranks #1 in value among software vendors.
> http://www.redhat.com/promo/vendor/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
> 
> iEYEARECAAYFAkruzR4ACgkQeiVVYja6o6OPIgCdGru/NkCsjk/zII3Ik6TnTkSM
> pVEAoJhNYi23F5vh/rwO1oKs+QDts5fb
> =McyP
> -----END PGP SIGNATURE-----


-- 

David O'Brien
Red Hat Asia Pacific
+61 7 3514 8189

http://freeipa.org/page/DocumentationPortal
http://git.fedorahosted.org/git/ipadocs.git


"The most valuable of all talents is that of never using two words when
one will do."
     Thomas Jefferson



More information about the sssd-devel mailing list