[SSSD] Design Discussion: ID Mapping calls for the NSS responder

Sumit Bose sbose at redhat.com
Mon Feb 11 17:07:17 UTC 2013


On Fri, Feb 08, 2013 at 04:08:26PM -0500, Dmitri Pal wrote:
> On 02/08/2013 02:10 PM, Sumit Bose wrote:
> > On Fri, Feb 08, 2013 at 01:23:25PM -0500, Dmitri Pal wrote:
> >> On 02/06/2013 11:13 AM, Sumit Bose wrote:
> >>> Hi,
> >>>
> >> So far makes sense.
> >> Who are the potential consumers of the library other than the utility?
> >> Is it CIFS utils? Should we reach out to the CIFS community for the
> >> follow up integration?
> > yes, CIFS utils will use it, but we will provided the plugin as part of
> > https://fedorahosted.org/sssd/ticket/1534 .
> 
> Does the design of the plugin belong to the same page? I suspect yes.
> Please add a section about it.

The plugin has a separate design page
https://fedorahosted.org/sssd/wiki/DesignDocs/IntegrateSSSDWithCIFSClient
I will finish the page when this design page is approved.
> >
> >> Any other consumers? Desktop?
> > If all is in place (global catalog lookup, support for trusted domains)
> > FreeIPA will used it instead of winbind.
> 
> Yeah, I continue to forget that IPA grew a dependency on winbind for this.
> Yes sure this makes perfect sense to drap the dependency and use SSSD
> and its interface.
> Please then open a ticket for switching IPA to use this interface.

Will do.

> Should we have design for this switch to be covered on the same design page?

No, it should be a separate page on the FreeIPA trac.

> 
> However I wonder whether  this interface should follow the same
> architecture as we have for other components. I.e.:
> * thin client lib is used by the app
> * this lib talks to responder over local socket
> * responder deals with getting data from cache or triggering provider
> asynchronously.
> It seems that this architecture is somewhat implied. I sort of figured
> it our by rereading the design couple times.
> But it requires a bit of knowledge of prior art. Can this part be clarified?

I added a sentence about it.

> May be a diagram would be helpful?
> A draft one is attached.

Thank you, I added it to the page.

bye,
Sumit



More information about the sssd-devel mailing list