[SSSD] sssd not setting IPA AD trusted user homedir

Pavel Reichl preichl at redhat.com
Wed Jan 22 16:13:38 UTC 2014


On Fri, 2014-01-17 at 13:02 +0100, Sumit Bose wrote:
> On Fri, Jan 17, 2014 at 12:56:09PM +0100, Jakub Hrozek wrote:
> > On Fri, Jan 17, 2014 at 12:43:04PM +0100, Sumit Bose wrote:
> > > On Fri, Jan 17, 2014 at 12:04:38PM +0100, Jakub Hrozek wrote:
> > > > On Fri, Jan 17, 2014 at 11:55:08AM +0100, Pavel Reichl wrote:
> > > > > 
> > > > > > We just have to remember to touch this code, if we start to support home
> > > > > > directories defined in AD.
> > > > > > 
> > > > > 
> > > > > I'm sorry that I failed to see what you were implying. My patch will
> > > > > override value of homedir for members of every subdomain by
> > > > > subdomain_homedir. 
> > > > > 
> > > > > I missed that even if subdomain_homedir is not set explicitly in
> > > > > sssd.conf it has a non NULL value. 
> > > > 
> > > > Me too and to be honest I failed to test the patch with AD subdomains
> > > > with POSIX attributes. Sorry about that.
> > > > 
> > > > I think Sumit's suggestion makes the most sense now, but the
> > > > documentation should be amended, too. Currently the man page implies
> > > > that the subdomain_homedir parameter will have equal effect for all
> > > > kinds of subdomains, while the code would only use it for IPA-AD trust
> > > > cases (be it for the server mode or the client).
> > > 
> > > I also realized that having the right home directory in sysdb might be
> > > useful because krb5_ccname_template allows to expand %h to the user's
> > > home directory. And here the home directory is looked up in sysdb.
> > > 
> > > bye,
> > > Sumit
> > 
> > But that also affects the other options, right? Sounds like a second
> > problem to me, or did you want to solve both together?
> 
> no
> 
> > 
> > About the subdomain homedir, I think we should:
> >     1) revert the original patch that is commited
> >     2) fix the IPA server mode the way you described in your reply to
> >        Pavel's mail
> >     3) Amend the subdomain_homedir documentation so that it's clear
> >        where the option has effect
> 
> +1
> 
> bye,
> Sumit
> 
> > _______________________________________________
> > sssd-devel mailing list
> > sssd-devel at lists.fedorahosted.org
> > https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel

Hello,

please see attached patches. 

PR

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Revert-NSS-add-support-for-subdomain_homedir.patch
Type: text/x-patch
Size: 1289 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20140122/d0bea08b/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-AD-support-for-subdomain_homedir.patch
Type: text/x-patch
Size: 4197 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20140122/d0bea08b/attachment-0001.bin>


More information about the sssd-devel mailing list