[SSSD] [PATCH] Make the password field configurable in NSS

Simo Sorce ssorce at redhat.com
Wed Nov 18 16:41:10 UTC 2009


On Wed, 2009-11-18 at 11:31 -0500, Stephen Gallagher wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On 11/16/2009 07:01 PM, Jakub Hrozek wrote:
> > Per the discussion on sssd-devel list, nss_sss should not return a
> > hardcoded value but this should rather be configurable to allow whatever
> > the OS or distribution thinks is the best for the particular case.
> > 
> > Fixes: #266
> 
> Nack.
> 
> Simo and I discussed this a bit on IRC. As Brian says, it's more correct
> to use "*" here, since the SSSD doesn't [currently] support shadow NSS
> maps. Please make "*" the default.
> 
> Also, I'm not sure that this shouldn't just be an undocumented option
> (not visible in the manpages). In 99.9% of deployments, there should be
> no need to change this value as long as we don't support shadow maps.

Right,
I agree we want to leave this one undocumented for now.

> Implementation looks fine, though.

/me nods

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York




More information about the sssd-devel mailing list