[SSSD] Design Discussion: ID Mapping calls for the NSS responder

Sumit Bose sbose at redhat.com
Thu Feb 7 20:52:48 UTC 2013


On Thu, Feb 07, 2013 at 02:18:19PM -0500, Stephen Gallagher wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> 
> 
> On Wed 06 Feb 2013 11:13:57 AM EST, Sumit Bose wrote:
> 
> > ==== C-API ====
> > The C-API for those calls will be made available in a new library libsss_nss_idmap (other names are welcome). In contrast to libnss_sss loaded via glibc into client programs the new library can be linked with other programs. The new calls will be declared in a header sss_nss_idmap.h and can have reasonable return values to make error detection an reporting easier for the clients using the new API.
> >
> 
> What's the reason for creating a new library here vs. using
> libsss_idmap.so for this purpose? It's already there and is a
> dependency for the SSSD package.

It would be possible to add this to libsss_idmap.so but both have
different purposes.

libsss_idmap.so is internally used by sssd and FreeIPA for algorithmic
ID mapping. The main reason for making it a library was that FreeIPA can
use it too.

libsss_nss_idmap.so will be used by other programs to query sssd about
the mapping. sssd does not depend on this library.

bye,
Sumit
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.13 (GNU/Linux)
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
> 
> iEYEARECAAYFAlET/foACgkQeiVVYja6o6PAcQCfSUhna+Oeh40SX7U+ydZX4rVQ
> jakAn3c0jB/2BWIMpiDX2gdPZ150UAix
> =Gvsk
> -----END PGP SIGNATURE-----
> 
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel



More information about the sssd-devel mailing list