[SSSD] [PATCH] Use AD domain flat name to match domains

Simo Sorce simo at redhat.com
Mon May 6 12:49:53 UTC 2013


On Sun, 2013-05-05 at 23:21 +0200, Jakub Hrozek wrote:
> Hi,
> 
> the attached patch implements the changes described in #1468. The logic
> itself is implemented in confdb_get_domain_internal, which breaks the
> layering a little because there is some knowledge about the providers
> used in the responders, in particular loading the flat name is only
> called if the id_provider equals "AD".
> 
> Also technically the NetBIOS name could be completely different from the
> AD domain name and could have been read from the rootDSE. But honestly
> I really don't think it's worth it, so I went with a config option, that
> would be unset in the vast majority of deployments.

TBH I am not really happy with doing this through a paramter.

A flat name is fully discoverable from AD and allowing users to set it
has the consequences that they can get it wrong, and it is one more
step.

What is the reason we want to have it so badly now, but do not want to
do proper discovery to get it ?

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York




More information about the sssd-devel mailing list