[SSSD] Fruits and Nuts (or, need help with nested LDAP groups)

Dmitri Pal dpal at redhat.com
Mon Oct 24 18:34:15 UTC 2011


On 10/24/2011 02:29 PM, John Gorkos wrote:
> On Monday, October 24, 2011 12:30:40 PM Stephen Gallagher wrote:
>> On Mon, 2011-10-24 at 07:27 -0400, Gorkos, John wrote:
>>
>>> Ding Ding Ding!  We have a winner!
>>> Addint the "ldap_group_object_class" to my 1.5.14 sssd.conf did indeed
>>> fix my nested groups problem:
>>> # id alpha
>>> uid=10001(alpha) gid=1000(users)
>>> groups=1000(users),1001(fruits),1002(nuts)
>>>
>>> It does not work on 1.5.1 (which we suspected/knew already), but I'm
>>> comfortable pushing the newer RPMs to my management machine.
>>
>> For the record, the fact that RHEL 6.2 identifies the version as SSSD
>> 1.5.1 is a peculiarity of the RHEL process (which requires that you
>> start from a particular upstream version and then apply patches to fix
>> individual issues). However, the final release of RHEL 6.2 will be
>> functionally identical to 1.5.14 (or possibly 1.5.15 if we discover
>> urgent fixes before it ships).
>>
>> I do encourage you to try the SSSD version in the 6.2 beta (and
>> ultimately final) which should provide you the same functionality and
>> keep you on an enterprise-supported version.
> We're pulling the 6.2Beta repo now for our 6.x systems.  Is there any hope for 
> a backport of the 1.5.9+ tree to RHEL5, since the majority of my systems are 
> 5.3 and 5.5 (upgrading is blocked by our s/w development group).
>
> John Gorkos
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel

John,

I do not think it would be possible to back port 1.5.x to earlier
version RHEL5 without specific customization. Would you be interested in
engaging our professional services for that kind of project?

-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/






More information about the sssd-devel mailing list