[SSSD] [PATCH] Create ghost users when a user DN is encountered in IPA

Simo Sorce simo at redhat.com
Thu Oct 11 13:44:46 UTC 2012


On Thu, 2012-10-11 at 10:52 +0200, Jakub Hrozek wrote:
> The IPA has a defined directory tree structure that allows us to guess
> the username from a DN without having to look up the DN in LDAP.

Jakub,
it looks like you always take the shortcut in this case.
I am not comfortable with that, I'd rather you check the DN matches the
expected tree structure, and fallback to the classic method if not.
This allows us to future-proof sssd if we were to relax constraints
later on in IPA and allow for adding users and groups in custom OUs,
while keeping the optimization for the current DIT.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York




More information about the sssd-devel mailing list