[SSSD] [PATCH] Allow using POSIX attributes for AD subdomain users

Jakub Hrozek jhrozek at redhat.com
Thu Sep 26 14:01:17 UTC 2013


On Thu, Sep 26, 2013 at 02:15:42PM +0200, Jakub Hrozek wrote:
> Hi,
> 
> the attached patches implement ticket #2070 where subdomain users have
> POSIX attributes and the SSSD honors them.
> 
> So far I only tested with AD provider, not with trust environment, but I
> wanted to sent the patches for review anyway.
> 
> The patches mostly amend the search filters and bases which presumed
> strictly ID mapping in AD domains before. I also implemented Sumit's
> idea on how to handle the SFU attributes as a new map. I think it's the
> right thing to do, because if SFU is configured on the server, then the
> POSIX clients should honour it if ID mapping is off.
> 
> One question I have is whether we should explicitly document that the
> POSIX attributes must be replicated in the man page?

> From 88f2e35b3ef9cbf0655093d80c297ada0da47e09 Mon Sep 17 00:00:00 2001
> From: Jakub Hrozek <jhrozek at redhat.com>
> Date: Wed, 25 Sep 2013 23:05:48 +0200
> Subject: [PATCH 4/5] AD: Add new option map ad_2008r2_sfu_user_map

As discussed on the phone with Sumit, the way the map is selected is
wrong and would only allow members who are added using the SFU dialog to
be searched.



More information about the sssd-devel mailing list