[SSSD] Domain fallback, filter_users and uid

Jakub Hrozek jhrozek at redhat.com
Mon Sep 23 12:09:54 UTC 2013


On Mon, Sep 23, 2013 at 01:35:28PM +0200, Lukas Slebodnik wrote:
> >That's a side-effect of the hack I didn't think about..I didn't realize
> >we also check the negative cache again when returning the users.
> >
> >Can you check if it would help to use "filter_users = john at local_home" ?
> >
> This will not help, because john can be found in the both domains.
> Like Pavel wrote, we don't skip first domain if getpwuid is called.

I actually think multiple domains with overlapping UIDs are not really
supportable.

Using the LDAP filtering would move the logic to the backend side, which
might work.



More information about the sssd-devel mailing list