[SSSD] [PRELIMINARY][PATCH] ifp users and groups
Jakub Hrozek
jhrozek at redhat.com
Mon May 4 13:25:42 UTC 2015
On Mon, May 04, 2015 at 02:51:57PM +0200, Pavel Březina wrote:
> New patches are attached.
Thanks a lot for the patches!
> All review-issues should be addressed. Those
> patches contains also extraAttributes, group members and user attributes
> acl.
>
> Do we want to implement group attributes acl also?
For which attributes exactly? I think all information that is reachable
using the NSS calls can be published by default, but no other
information should.
>
> The groups and users attributes on group object do not reply with full
> recursive membership at the moment since we do not store in on groups object
> in sysdb... is it possible to leave it this way or should I compute the
> membership? Sysdb only contains full user members (in memberuid attribute),
> but it contains only direct group members (in member attribute).
>
I guess user members are good enough for now. But we should open and
defer a ticket.
More information about the sssd-devel
mailing list