[SSSD] RFC: Expose different identity domains to different D-BUS consumers
Dmitri Pal
dpal at redhat.com
Thu May 21 13:26:28 UTC 2015
On 05/21/2015 06:22 AM, Pavel Březina wrote:
> https://fedorahosted.org/sssd/ticket/2187
>
> My idea is as follows:
>
> - create new option 'domains' in [ifp] sections
> - this option can reduce number of domains set in 'domains' in [sssd]
> section
> - provide this reduced domains set to rctx->domains
>
> [sssd]
> domains = A, B, C
>
> [ifp]
> domains = B
>
> rctx->domains would contain only B in ifp responder.
>
> But I am not sure if it fulfills the requirement.
IMO it should be similar to
https://fedorahosted.org/sssd/wiki/DesignDocs/RestrictDomainsInPAM but
for IFP.
The design above does not address the requirement.
--
Thank you,
Dmitri Pal
Director of Engineering for IdM portfolio
Red Hat, Inc.
More information about the sssd-devel
mailing list