[SSSD] [PATCHES] support local overrides

Sumit Bose sbose at redhat.com
Mon Jul 27 15:23:54 UTC 2015


On Mon, Jul 27, 2015 at 05:09:17PM +0200, Jakub Hrozek wrote:
> On Mon, Jul 27, 2015 at 12:00:25PM +0200, Pavel Březina wrote:
> > >Hmm, why? Can we instead send a signal to SSSD to pick up the changes?
> > >(If yes, then it can be a follow-up patch..)
> > 
> > No, it is not possible to change view on the fly the way views are
> > implemented.
> > 
> 
> I think this is the rule for the IPA provider, but I don't see why it
> should be this way in responders if we can update the domain info. I'll
> file a ticket.

I would say it is a general precaution. Switching the view on-the-fly
might change UIDs and GIDs mappings of running processes and logged-in
users on-the-fly. All kind of strange things might happen then, e.g.
calling 'whoami' might return a different user name, if in the new view
the UID of the running user belongs to a different user.

bye,
Sumit
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel



More information about the sssd-devel mailing list