[SSSD] sssd and rpc

Yassir Elley yelley at redhat.com
Thu Jan 23 20:11:53 UTC 2014


Thanks for all the replies. Very helpful!

Regards,
Yassir.

----- Original Message -----
> On 01/22/2014 09:54 AM, Simo Sorce wrote:
> > On Tue, 2014-01-21 at 20:36 -0500, Dmitri Pal wrote:
> >> On 01/21/2014 07:08 PM, Yassir Elley wrote:
> >>> It seems that the only network protocols used by SSSD are LDAP, KRB5, and
> >>> DNS. On the other hand, Samba makes RPC calls all over the place (for
> >>> authentication, etc).
> >>>
> >>> * Does sssd make any RPC calls (e.g. when interacting with a Domain
> >>> Controller)?
> >> The global catalog part uses RPC for example.
> > No it doesn't, it is LDAP just on a different port :)
> >
> >>> * Does Microsoft require clients to use RPC calls to access certain DC
> >>> functionality?
> >> Yes.
> > No, not really, just for client to perform all the basic functions you
> > should be able to use just LDAP, DNS and Krb, however some
> > administrative operations may still require RPC, also things like
> > downloading Group Policy require a CIFS share.
> >
> >>> * If not, why does Samba use RPC calls rather than LDAP/KRB5?
> > Because of its legacy nature, Samba was born in NT style domains where
> > RPC calls were the only thing available. Some things have been changed
> > to use LDAP/Krb when available but samba still falls back to RPC if
> > something goes wrong on those protocols anyway.
> >
> >> AFAIK SSSD does use it, not to the same extent as winbind but it does.
> > SSSD does not have any RPC support at the moment.
> >
> >> Some of the functionality like global catalog is available only via RPC.
> > Nope, GC is just LDAP.
> >
> > Simo.
> >
> Hm, thanks for the education.
> 
> --
> Thank you,
> Dmitri Pal
> 
> Sr. Engineering Manager for IdM portfolio
> Red Hat Inc.
> 
> 
> -------------------------------
> Looking to carve out IT costs?
> www.redhat.com/carveoutcosts/
> 
> 
> 
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
> 



More information about the sssd-devel mailing list