[SSSD] [PRELIMINARY][PATCH] ifp users and groups

Jakub Hrozek jhrozek at redhat.com
Mon May 4 13:25:42 UTC 2015


On Mon, May 04, 2015 at 02:51:57PM +0200, Pavel Březina wrote:
> New patches are attached.

Thanks a lot for the patches!

> All review-issues should be addressed. Those
> patches contains also extraAttributes, group members and user attributes
> acl.
> 
> Do we want to implement group attributes acl also?

For which attributes exactly? I think all information that is reachable
using the NSS calls can be published by default, but no other
information should.

> 
> The groups and users attributes on group object do not reply with full
> recursive membership at the moment since we do not store in on groups object
> in sysdb... is it possible to leave it this way or should I compute the
> membership? Sysdb only contains full user members (in memberuid attribute),
> but it contains only direct group members (in member attribute).
> 

I guess user members are good enough for now. But we should open and
defer a ticket.



More information about the sssd-devel mailing list