[SSSD] Support for subdomains - stage 1

Jan Zelený jzeleny at redhat.com
Wed Apr 18 13:22:03 UTC 2012


> On Fri, Apr 13, 2012 at 08:24:18AM +0200, Jan Zelený wrote:
> > > On Thu, Apr 12, 2012 at 09:52:14PM +0200, Jan Zeleny wrote:
> > > > Jakub Hrozek <jhrozek at redhat.com> wrote:
> > > > > On Tue, Apr 10, 2012 at 12:38:31AM -0400, Jakub Hrozek wrote:
> > > This works fine, but the new option should be added to the configAPI
> > > (sorry, I hope this would be the last iteration).
> > 
> > My mistake, I knew I'm missing something but late hour was stronger than
> > my will to re-check everything.
> > 
> > > The DEBUG message level is set to SSSDBG_CRIT_FAILURE, which seems
> > > quite high because this DEBUG message is emited for any back end which
> > > does not support subdomains which is everything but IPA. This should
> > > be a MINOR failure at best, maybe even lower.
> > 
> > I will change this in separate patch
> > 
> > > Also, instead of defaulting to "not set", would it be a good idea to
> > > default to "ipa" in the IPA provider and maybe check during the first
> > > request if subdomains are enabled on the server  -- provided that
> > > runtime detection  is possible which I honestly don't know. That way
> > > the clients wouldn't have to be reconfigured if trusts are added on
> > > the server.
> > 
> > I'm not completely sure about this since Sumit did the part where SSSD
> > communicates with IPA. I will discuss it with him once he is back from
> > vacation. I'll send the patch set then.
> 
> yes, please activate subdomains for the IPA provider by default, the
> detection if subdomains are available is always done at runtime.

After consultation with Jakub, we agreed to move this task to separate ticket.

https://fedorahosted.org/sssd/ticket/1308

I suppose that the change of debug level stated above won't be necessary after 
this change.

I'm sending the (hopefully) last iteration of patches in attachment.

Thanks
Jan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: subdomains.tar.bz2
Type: application/x-bzip-compressed-tar
Size: 31313 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120418/54372ded/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120418/54372ded/attachment.sig>


More information about the sssd-devel mailing list