[SSSD] Fruits and Nuts (or, need help with nested LDAP groups)

Dmitri Pal dpal at redhat.com
Mon Oct 24 18:35:24 UTC 2011


On 10/24/2011 02:34 PM, Dmitri Pal wrote:
> On 10/24/2011 02:29 PM, John Gorkos wrote:
>> On Monday, October 24, 2011 12:30:40 PM Stephen Gallagher wrote:
>>> On Mon, 2011-10-24 at 07:27 -0400, Gorkos, John wrote:
>>>
>>>> Ding Ding Ding!  We have a winner!
>>>> Addint the "ldap_group_object_class" to my 1.5.14 sssd.conf did indeed
>>>> fix my nested groups problem:
>>>> # id alpha
>>>> uid=10001(alpha) gid=1000(users)
>>>> groups=1000(users),1001(fruits),1002(nuts)
>>>>
>>>> It does not work on 1.5.1 (which we suspected/knew already), but I'm
>>>> comfortable pushing the newer RPMs to my management machine.
>>> For the record, the fact that RHEL 6.2 identifies the version as SSSD
>>> 1.5.1 is a peculiarity of the RHEL process (which requires that you
>>> start from a particular upstream version and then apply patches to fix
>>> individual issues). However, the final release of RHEL 6.2 will be
>>> functionally identical to 1.5.14 (or possibly 1.5.15 if we discover
>>> urgent fixes before it ships).
>>>
>>> I do encourage you to try the SSSD version in the 6.2 beta (and
>>> ultimately final) which should provide you the same functionality and
>>> keep you on an enterprise-supported version.
>> We're pulling the 6.2Beta repo now for our 6.x systems.  Is there any hope for 
>> a backport of the 1.5.9+ tree to RHEL5, since the majority of my systems are 
>> 5.3 and 5.5 (upgrading is blocked by our s/w development group).
>>
>> John Gorkos
>> _______________________________________________
>> sssd-devel mailing list
>> sssd-devel at lists.fedorahosted.org
>> https://fedorahosted.org/mailman/listinfo/sssd-devel
> John,
>
> I do not think it would be possible to back port 1.5.x to earlier
> version RHEL5 without specific customization. Would you be interested in
> engaging our professional services for that kind of project?
>
And let us have this discussion off list.

-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/






More information about the sssd-devel mailing list