[SSSD] [PATCH] Inheric home dir and shell overrides for subdomains

Jakub Hrozek jhrozek at redhat.com
Wed Jan 15 16:20:01 UTC 2014


On Wed, Jan 15, 2014 at 04:57:49PM +0100, Sumit Bose wrote:
> On Tue, Jan 14, 2014 at 02:04:40PM +0100, Jakub Hrozek wrote:
> > Hi,
> > 
> > Jeremy Agee from our QE team found out an inconsistency in how we handle
> > the home directory and shell fallbacks. If the fallback is set globally
> > in the [nss] section, then everything works as expected and the
> > fallbacks are honoured for all users. However, if the fallbacks are set
> > in the [domain] section, then they only apply for the parent domain, not
> > subdomains.
> > 
> > I think there is no reason to not inherit the overrides. Even though
> > there is separate subdomain_homedir override, that parameter serves a
> > different use case when the primary domain (typically IPA) has POSIX
> > attributes, but the subdomain does not.
> > 
> > For AD case, I think we should just inherit these settings when creating
> > the subdomain. The IPA server mode would use these values and they can
> > be picked up by legacy clients. Non-legacy clients do not have a way to
> > use the homedir and shell discovered on the server as the extop only
> > transmits name, UID and GID.
> > 
> > The other patch that is attached is meant to support the default homedir
> > expansion that contains user name. But because subdomain users have the
> > FQDN in the name attribute, the 'plain' username has to be extracted from
> > the FQDN until Michal finishes his refactoring.
> 
> ACK, all parameters are now working as expected for subdomains.
> 
> bye,
> Sumit

Pushed to master and sssd-1-11



More information about the sssd-devel mailing list