[SSSD] [PATCH] Allow running with read only root

Dmitri Pal dpal at redhat.com
Wed Mar 24 14:38:24 UTC 2010


Simo Sorce wrote:
> On Wed, 24 Mar 2010 10:22:51 -0400
> Dmitri Pal <dpal at redhat.com> wrote:
>
>   
>> Simo,
>>
>> I think that this limitation should be documented.  It is the admin's
>> choice to use SSSD on such system or not but if he does he should be
>> warned and accept limitations that SSSD would not fully function.
>> I do not see a reason to NACK the patch on the grounds you mentioned.
>> If there is a better solution sure but if this is the limitation of
>> the read only system then let us do the best we can offer (which the
>> current fix provides) than just dismiss the claim as you suggest.
>>
>> I suggest Steve and original bug reporter to chime in.
>>     
>
> The only problem I have is that by adding this in by default, someone
> may not realize what is going on, and SSSD has no way to warn as it
> just works.
>   

May be some kind of warning in the log and syslog would be sufficient.
For example if we detect that the root is RO we can output some sort of
message into syslog.
If it is a RO would the syslog be on the NFS or some other writable media?
Or the common practice to use rsyslog in this case?
Anyways, a message like: "Read only file system detected. Some of the
SSSD functionality will be disabled. See documentation for more
details." would go a long way towards alerting admin. The enabling it by
default might be fine then.

Thoughts?

> Of course we can decide that that's ok and the admin is just getting
> what he asked for, I am open to discuss, and if most think we should
> get it in, I am ok.
>
> Simo.
>
>   


-- 
Thank you,
Dmitri Pal

Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/




More information about the sssd-devel mailing list