[SSSD] pam_pkcs11.so is missing for LOCAL domain?

David O'Brien davido at redhat.com
Thu Apr 29 00:37:54 UTC 2010


Stephen Gallagher wrote:
> On 04/26/2010 09:33 PM, David O'Brien wrote:
>> Stephen Gallagher wrote:
>>> There's no reason to change the manpage. The functionality is still
>>> present, and it's perfectly fine to use it. However, in RHEL6 it is not
>>> an interesting case, and thus should be removed from the deployment guide.
>>>
>>> The issue here is that, because of the elimination of InfoPipe from the
>>> roadmap, the SSSD-provided local users have no benefits over using the
>>> standard POSIX /etc/passwd and /etc/shadow files (except for nested
>>> groups, but that's such a rare case that it's not worth discussing right
>>> now)
>>>
>>> The original plan for the local domain was so that we could carry
>>> additional information in the same data store as the user (such as
>>> locale preferences, face browser image, etc.). This additional
>>> functionality has been postponed indefinitely, so we should reduce
>>> confusion in the RHEL documentation and not bring it up.
>>>
>>>
>> ah, ok. I read "not an interesting case" as "we don't want to spend time
>> on it now, and it's no longer available or supported". So, man pages
>> stay as-is, and I'll remove the very small section on Nested Groups.
>> Impact on MPGs? Is that another case of "still there but don't talk
>> about them in the Dep. Guide"?
>>
>> thanks again
>>
> 
> 
> MPGs shouldn't be talked about in the context of SSSD. Some time ago, we 
> decided to make that an internal feature, rather than a configurable 
> one. So any backend that supports MPGs (LOCAL and IPA, currently) will 
> do so silently and without the end-user needing to know about them.
> 

ok, removing that little sub-section as well...

-- 

David O'Brien
Red Hat Asia Pacific Pty Ltd

He who asks is a fool for five minutes, but he who does not ask remains 
a fool forever."
  ~ Chinese proverb



More information about the sssd-devel mailing list