[SSSD] [PATCHES] Always store home directory expansions to sysdb
Jakub Hrozek
jhrozek at redhat.com
Mon Apr 7 18:37:53 UTC 2014
On Mon, Apr 07, 2014 at 08:23:58PM +0200, Lukas Slebodnik wrote:
> On (04/04/14 19:39), Pavel Reichl wrote:
> >Hello,
> >
> >attached patches implement ticket:
> >
> >https://fedorahosted.org/sssd/ticket/2205
> >
> >Maybe I split the changes into too many patches, please feel free to
> >suggest squashing them.
> >
> >Regards,
> >
> >Pavel Reichl
>
>
> I think there is a conflict in requirements between tickets
> * #2205 Always store home directory expansions to sysdb
> * #1853 [RFE] Allow sssd to replace macro (ie. %H) with value specified in
> config file
>
> Lets imagine situation.
> You have stored homedir template in LDAP server
> dn: uid=sshuser,cn=users,<domain>
> homeDirectory: %H/sshuser01
>
> In sssd.conf you will have
> homedir_substring = /export/home
>
> 1. Initial request will expand homedir to string "/export/home/sshuser01".
> 2. you decided to change homedir_substring to another value e.g. "/home"
> 3. homedir will return old value, because sysdb cache contains expanded value
> and no template.
>
> -- In offline mode, sssd will not return correct values after changing
> value of option homedir_substring because template is stored only in server.
> -- it can be confusing for users that old homedir is returned after changing
> value of option homedir_substring. (cached values)
> -- there will be a workaround (invalidating sysdb cache); but I would say
> it will not be intuitive.
This just needs to be documented well in the man pages. We need to say
that changing this option mandates invalidating the cache. Many options
do, I don't think this will be suprising for the users.
More information about the sssd-devel
mailing list