[SSSD] RFC: Expose different identity domains to different D-BUS consumers

Dmitri Pal dpal at redhat.com
Thu May 21 13:26:28 UTC 2015


On 05/21/2015 06:22 AM, Pavel Březina wrote:
> https://fedorahosted.org/sssd/ticket/2187
>
> My idea is as follows:
>
> - create new option 'domains' in [ifp] sections
> - this option can reduce number of domains set in 'domains' in [sssd] 
> section
> - provide this reduced domains set to rctx->domains
>
> [sssd]
> domains = A, B, C
>
> [ifp]
> domains = B
>
> rctx->domains would contain only B in ifp responder.
>
> But I am not sure if it fulfills the requirement.

IMO it should be similar to 
https://fedorahosted.org/sssd/wiki/DesignDocs/RestrictDomainsInPAM but 
for IFP.
The design above does not address the requirement.


-- 
Thank you,
Dmitri Pal

Director of Engineering for IdM portfolio
Red Hat, Inc.




More information about the sssd-devel mailing list