[SSSD] override_homedir exception

Jakub Hrozek jhrozek at redhat.com
Tue Aug 27 10:05:51 UTC 2013


On Tue, Aug 27, 2013 at 11:58:37AM +0200, Jean-Baptiste Denis wrote:
> > I can only think about a terrible hack -- set two domains, filter the
> > single user you want to keep the original homedir from the first domain.
> 
> Just tested your suggestion, out of curiosity and it worked. Why not, my
> need is quite specific.
> 
> Slightly out of topic question, I've also tried it with filter_groups
> instead of filter_users, and in my case, the groups are search within
> ldap. Is there a way to lookup for a local group in the a domain defined
> with id_provider = ldap ?
> 
> [domain/dom1]
> override_homedir = /home/%u
> filter_group = ldaphome # <--- a group within /etc/group ?
> id_provider = ldap
> 
> Jean-Baptiste

I'm not sure this would work correctly because the usual order of NSS
databases as defined in /etc/nsswitch.conf is "files sss". That way,
/etc/groups is queried first and only if the group is not found in
files, the sss source is queried.



More information about the sssd-devel mailing list