[SSSD] Handling nested netgroups (looking for recommendations)

Stephen Gallagher sgallagh at redhat.com
Thu Sep 30 16:55:32 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 09/30/2010 12:03 PM, Sumit Bose wrote:
> 
> ok, then I understood it wrong. So your suggestion is to translate the
> DNs to the corresponding CNs and return them together with the plain
> names from memberNisNetgroup to glibc and do not do any nested group
> unrolling in sssd.
> 
> I'm fine with this scheme. As mentioned earlier I think we should agree
> on a basic solution for a start and should add optimizations based on
> Use-Cases later.
> 

Ok, just to summarize:

The plan will be that for ALL memberNisNetgroup entries, we will
normalize them as names of netgroups if they are DNs, and then we will
return all of them to glibc rather than attempting to internally resolve
them.

Is this an accurate summary?

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkykwQQACgkQeiVVYja6o6NfjACgo1UboDr295tfZpBgciEREHit
DosAn3xvrAFVJ+HIUIp6S6iytoeBSQvn
=e9wu
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list