[SSSD] sssd caching hosts ?

Olivier ldap at guillard.nom.fr
Wed Mar 18 23:33:20 UTC 2015


Thanks for your replies,

I found the ticket, that's why I asked : sounds to me a hard job to plan,
especially now with DNSEC validation (and not sure that it would have a
real added value)... A "natural" way for sssd if really a plan might be to
catch zones from one of the ldap bakend available for bind ?

Anyway, the real reason I'm investigating : I'm distributing sudo rules
with ldap and I want to use hostname to tell which host the rules appliy
on. I have told in nsswitch.conf to query the DNS to find out the hostname
but I'm not sure about how is collected the hostname from the dns in the
checking process (especially if the machine has more than one interface) ?
Is the label considered as being the hostname the reverse of the IP adress
for the default interface ?

Thanks for any guidance,

--
Olivier



2015-03-17 21:27 GMT+01:00 Jakub Hrozek <jhrozek at redhat.com>:

> On Tue, Mar 17, 2015 at 02:46:32PM -0400, Dmitri Pal wrote:
> > On 03/17/2015 12:56 PM, Lukas Slebodnik wrote:
> > >On (17/03/15 17:26), Olivier wrote:
> > >>Hi everyone,
> > >>
> > >>I was wondering if host requests caching is still part of sssd plans :
> > >>https://fedorahosted.org/sssd/ticket/359
> > >>
> > >This ticket is in deferred section
> > >which means that we do not plan to implement it in near future.
> > >
> > >But contribution is welcomed everytime and we can provide assistance.
> > >
> > >LS
> > >_______________________________________________
> > >sssd-devel mailing list
> > >sssd-devel at lists.fedorahosted.org
> > >https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
> > Why do you need it? It is really bad idea to have hosts map.
> > DNS is the way to do.
>
> Right, this is the direction Fedora has been pushing.
>
> In the meantime, you can still use nscd for the hosts map only.
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20150319/9e87776c/attachment.html>


More information about the sssd-devel mailing list