[SSSD] sssd.conf include feature
Jakub Hrozek
jhrozek at redhat.com
Mon Mar 19 08:16:33 UTC 2012
On Mon, Mar 19, 2012 at 06:24:53PM +1100, Greg.Lehmann at csiro.au wrote:
> Wondering about whether this feature exists or is planned to exist? It is
> for use in a shared administration environment. We have central
> administration and local administrators. It would allow a central
> configuration for sssd with local changes. Puppet could manage the central
> main file and include a user managed portion. We handle sudoers in a
> similar way. I guess the main use of this might be to allow local admins
> to control who can login to a server. sssd.conf could include something
> like this:
>
>
>
> access_provider = simple
>
> simple_allow_groups = central_admins
>
>
>
> and the included locally managed file could have
>
>
>
> simple_allow_users = user01, user03, user42
>
>
>
> I know we can do this in other ways with puppet, but this would be simpler
> and it seems to me an include feature might have other uses.
>
>
Hi, this enhancement is tentatively scheduled for 1.11:
https://fedorahosted.org/sssd/ticket/1165
More information about the sssd-devel
mailing list