[SSSD] pam_pkcs11.so is missing for LOCAL domain?

Stephen Gallagher sgallagh at redhat.com
Tue Apr 27 11:46:21 UTC 2010


On 04/26/2010 09:33 PM, David O'Brien wrote:
> Stephen Gallagher wrote:
>>
>> There's no reason to change the manpage. The functionality is still
>> present, and it's perfectly fine to use it. However, in RHEL6 it is not
>> an interesting case, and thus should be removed from the deployment guide.
>>
>> The issue here is that, because of the elimination of InfoPipe from the
>> roadmap, the SSSD-provided local users have no benefits over using the
>> standard POSIX /etc/passwd and /etc/shadow files (except for nested
>> groups, but that's such a rare case that it's not worth discussing right
>> now)
>>
>> The original plan for the local domain was so that we could carry
>> additional information in the same data store as the user (such as
>> locale preferences, face browser image, etc.). This additional
>> functionality has been postponed indefinitely, so we should reduce
>> confusion in the RHEL documentation and not bring it up.
>>
>>
> ah, ok. I read "not an interesting case" as "we don't want to spend time
> on it now, and it's no longer available or supported". So, man pages
> stay as-is, and I'll remove the very small section on Nested Groups.
> Impact on MPGs? Is that another case of "still there but don't talk
> about them in the Dep. Guide"?
>
> thanks again
>


MPGs shouldn't be talked about in the context of SSSD. Some time ago, we 
decided to make that an internal feature, rather than a configurable 
one. So any backend that supports MPGs (LOCAL and IPA, currently) will 
do so silently and without the end-user needing to know about them.

-- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/



More information about the sssd-devel mailing list