[SSSD] Config file ownership and cwrap tests

Lukas Slebodnik lslebodn at redhat.com
Wed Jan 14 14:13:42 UTC 2015


On (14/01/15 16:08), Nikolai Kondrashov wrote:
>On 01/13/2015 02:31 PM, Nikolai Kondrashov wrote:
>>Hi everyone,
>>
>>I have a bit of a chicken/egg problem with implementing cwrap tests.
>>
>>Sssd currently requires the config file to belong to root. However, that is
>>not possible to arrange when running under a regular user, in cwrap tests.
>>Even though uid_wrapper fakes running under root, the created files still
>>belong to the real user.
>>
>>I see two ways out of this: either run under fakeroot, or allow the config
>>file to (also?) belong to the user sssd is configured to run under (target
>>user).
>>
>>While fakeroot will likely work, to me it seems like sweeping the problem
>>under the rug. The second option seems a bit more natural, especially
>>considering that the CDB file is explicitly chown'ed to the target user,
>>anyway.
>>
>>Now, since the target user can be configured both at the build time *and* in
>>the configuration file itself, we'll need to verify file ownership *after*
>>reading it. Or, can we maybe move user specification to command-line option?
>>
>>What do you think?
>
>Simo, do you have any thoughts on this?
>
>It is blocking my cwrap LDAP integration test implementation.
>
I was thiking you want to discuss about more complex solution
(in cwrap or in sssd).

and we would use a temporary workaround proposed in
https://lists.fedorahosted.org/pipermail/sssd-devel/2015-January/022232.html
I would not say it is a blocker.

LS



More information about the sssd-devel mailing list