[SSSD] [PATCH] Use AD domain flat name to match domains

Sumit Bose sbose at redhat.com
Mon May 6 07:40:21 UTC 2013


On Sun, May 05, 2013 at 11:21:19PM +0200, Jakub Hrozek wrote:
> Hi,
> 
> the attached patch implements the changes described in #1468. The logic
> itself is implemented in confdb_get_domain_internal, which breaks the
> layering a little because there is some knowledge about the providers
> used in the responders, in particular loading the flat name is only
> called if the id_provider equals "AD".
> 
> Also technically the NetBIOS name could be completely different from the
> AD domain name and could have been read from the rootDSE. But honestly
> I really don't think it's worth it, so I went with a config option, that
> would be unset in the vast majority of deployments.

Since I need the SID of the AD domain, e.g. to properly evaluate the
data in the PAC, I'm working on a patch which tires to read the SID and
the flat name from AD. I'll try to send it to the list later today.

I think in general it shouldn't be a problem to have both, config option
and dynamic discovery. I only wonder how to handle the case of
conflicts, i.e. the configured and discovered value differs.

bye,
Sumit



More information about the sssd-devel mailing list