[SSSD] [PATCH] AD: Always refresh LDAP subdomain list

Sumit Bose sbose at redhat.com
Mon Dec 16 21:09:58 UTC 2013


On Mon, Dec 16, 2013 at 07:05:16PM +0100, Jakub Hrozek wrote:
> On Mon, Dec 16, 2013 at 07:03:11PM +0100, Jakub Hrozek wrote:
> > On Mon, Dec 16, 2013 at 12:04:44PM +0100, Sumit Bose wrote:
> > > On Sat, Dec 14, 2013 at 10:18:32PM +0100, Jakub Hrozek wrote:
> > > > Hi,
> > > > 
> > > > I found this bug when testing the GC patches. Previously, when SSSD was
> > > > started, but subdomains list was up-to-date, the ad_ctx was not
> > > > initialized for the subdomain.
> > > > 
> > > > I was also thinking whether we should re-initialize the domain-realm
> > > > mappings after sssd startup, the way we re-initialize kdcinfo files. I
> > > > don't think it's strictly necessary because if someone deletes a file in
> > > > /var/lib/sss/pubconf, he should keep the broken pieces, but perhaps we
> > > > should be at least aware..
> > > 
> > > Maybe we can do this during the init phase of the responder? We

ah, sorry, I had the typo here                          ^^^^^^^^ first.
I meant to call it during the initialization of the subdomain part of
the AD and IPA providers.

bye,
Sumit

> > > currently only call sysdb_update_subdomains() here.
> > 
> > I think that's a good idea, I'll prepare a patch.
> > 
> > > If we want to add
> > > sss_write_domain_mappings() and maybe adding ads_store_sdap_subdom()
> > > there are well would be equivalent to your patch?
> > 
> > Sorry, I don't quite understand this part, I don't think we can call
> > ads_store_sdap_subdom() the provider doesn't know what kind of backend it
>                               ^^^^^^^^
>                     I meant to say "responder" here.
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel



More information about the sssd-devel mailing list