[SSSD] sssd caching hosts ?

Jakub Hrozek jhrozek at redhat.com
Thu Mar 19 09:16:31 UTC 2015


On Wed, Mar 18, 2015 at 07:54:04PM -0400, Dmitri Pal wrote:
> On 03/18/2015 07:33 PM, Olivier wrote:
> >Thanks for your replies,
> >
> >I found the ticket, that's why I asked : sounds to me a hard job to plan,
> >especially now with DNSEC validation (and not sure that it would have a
> >real added value)... A "natural" way for sssd if really a plan might be to
> >catch zones from one of the ldap bakend available for bind ?
> >
> >Anyway, the real reason I'm investigating : I'm distributing sudo rules
> >with ldap and I want to use hostname to tell which host the rules appliy
> >on. I have told in nsswitch.conf to query the DNS to find out the hostname
> >but I'm not sure about how is collected the hostname from the dns in the
> >checking process (especially if the machine has more than one interface) ?
> >Is the label considered as being the hostname the reverse of the IP adress
> >for the default interface ?
> >
> You know that you can use SSSD with sudo integration, right? SSSD will take
> care of this for you automatically.
> http://www.freeipa.org/images/7/77/Freeipa30_SSSD_SUDO_Integration.pdf

yes, and you might even find the option ldap_sudo_hostnames useful if,
for whatever reason you have trouble with FQDN..



More information about the sssd-devel mailing list