[SSSD] I hope this is the right list...

Stephen Gallagher sgallagh at redhat.com
Fri Mar 18 17:47:20 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 03/18/2011 11:38 AM, Vic Watson wrote:
>> Setup the "core server" as an ldap slave and then setup sssd
>> business as usual.
> 
> Hmmm.
> 
> According to the OpenLDAP Adminstrator's Guide, that involves changes
> to the master LDAP server, and shutting it down for replication.
> That's never going to happen.

Replication should not require any downtime. I'm not sure where you got
that idea from. You'd just stand up a new LDAP server and then set up a
replication agreement between them.

> 
> So to return to my original question - is it possible for one machine
> to authenticate against the sssd daemon on another machine?


Not really, no. The SSSD provides no network interface for another
machine to connect to it. The SSSD exists to provide caching and offline
login support to an individual machine, not to act as an LDAP slave server.

It really sounds like what you want is to set up an LDAP replica.

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk2DmqQACgkQeiVVYja6o6P+jwCeJlYNAMRaJ2YjcahiLf7LFHPl
hpAAn1DZ1IGLXSKBDZ1x8AqUMRwaSVip
=1G6z
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list