[SSSD] [PATCHES] Always store home directory expansions to sysdb

Lukas Slebodnik lslebodn at redhat.com
Mon Apr 7 18:23:58 UTC 2014


On (04/04/14 19:39), Pavel Reichl wrote:
>Hello,
>
>attached patches implement ticket:
>
>https://fedorahosted.org/sssd/ticket/2205
>
>Maybe I split the changes into too many patches, please feel free to
>suggest squashing them.
>
>Regards,
>
>Pavel Reichl


I think there is a conflict in requirements between tickets
    * #2205 Always store home directory expansions to sysdb
    * #1853 [RFE] Allow sssd to replace macro (ie. %H) with value specified in
            config file

Lets imagine situation.
You have stored homedir template in LDAP server
    dn: uid=sshuser,cn=users,<domain>
        homeDirectory: %H/sshuser01

In sssd.conf you will have
homedir_substring = /export/home

1. Initial request will expand homedir to string "/export/home/sshuser01".
2. you decided to change homedir_substring to another value e.g. "/home"
3. homedir will return old value, because sysdb cache contains expanded value
   and no template.

-- In offline mode, sssd will not return correct values after changing
   value of option homedir_substring because template is stored only in server.
-- it can be confusing for users that old homedir is returned after changing
   value of option homedir_substring. (cached values)
-- there will be a workaround (invalidating sysdb cache); but I would say
   it will not be intuitive.

LS



More information about the sssd-devel mailing list