<html>
  <head>
    <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <div class="moz-cite-prefix">On 03/18/2015 07:33 PM, Olivier wrote:<br>
    </div>
    <blockquote
cite="mid:CACgJ1oyfCHcrXq6OXOXQJzHt+UM=iEX8TaPrh=K18O7Jcia9sQ@mail.gmail.com"
      type="cite">
      <div dir="ltr">
        <div>
          <div>
            <div>
              <div>Thanks for your replies,<br>
              </div>
              <div><br>
                I found the ticket, that's why I asked : sounds to me a
                hard job to plan, especially now with DNSEC validation
                (and not sure that it would have a real added value)...
                A "natural" way for sssd if really a plan might be to
                catch zones from one of the ldap bakend available for
                bind ?<br>
              </div>
              <div><br>
              </div>
              Anyway, the real reason I'm investigating : I'm
              distributing sudo rules with ldap and I want to use
              hostname to tell which host the rules appliy on. I have
              told in nsswitch.conf to query the DNS to find out the
              hostname but I'm not sure about how is collected the
              hostname from the dns in the checking process (especially
              if the machine has more than one interface) ? Is the label
              considered as being the hostname the reverse of the IP
              adress for the default interface ?<br>
            </div>
          </div>
        </div>
        <div>
          <div><br>
          </div>
        </div>
      </div>
    </blockquote>
    You know that you can use SSSD with sudo integration, right? SSSD
    will take care of this for you automatically.<br>
<a class="moz-txt-link-freetext" href="http://www.freeipa.org/images/7/77/Freeipa30_SSSD_SUDO_Integration.pdf">http://www.freeipa.org/images/7/77/Freeipa30_SSSD_SUDO_Integration.pdf</a><br>
    <br>
    <br>
    <blockquote
cite="mid:CACgJ1oyfCHcrXq6OXOXQJzHt+UM=iEX8TaPrh=K18O7Jcia9sQ@mail.gmail.com"
      type="cite">
      <div dir="ltr">
        <div>
          <div>Thanks for any guidance,<br>
          </div>
          <div><br>
            --<br>
          </div>
          <div>Olivier<br>
          </div>
          <div><br>
            <br>
          </div>
        </div>
      </div>
      <div class="gmail_extra"><br>
        <div class="gmail_quote">2015-03-17 21:27 GMT+01:00 Jakub Hrozek
          <span dir="ltr">&lt;<a moz-do-not-send="true"
              href="mailto:jhrozek@redhat.com" target="_blank">jhrozek@redhat.com</a>&gt;</span>:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex"><span
              class="">On Tue, Mar 17, 2015 at 02:46:32PM -0400, Dmitri
              Pal wrote:<br>
              &gt; On 03/17/2015 12:56 PM, Lukas Slebodnik wrote:<br>
              &gt; &gt;On (17/03/15 17:26), Olivier wrote:<br>
              &gt; &gt;&gt;Hi everyone,<br>
              &gt; &gt;&gt;<br>
              &gt; &gt;&gt;I was wondering if host requests caching is
              still part of sssd plans :<br>
              &gt; &gt;&gt;<a moz-do-not-send="true"
                href="https://fedorahosted.org/sssd/ticket/359"
                target="_blank">https://fedorahosted.org/sssd/ticket/359</a><br>
              &gt; &gt;&gt;<br>
              &gt; &gt;This ticket is in deferred section<br>
              &gt; &gt;which means that we do not plan to implement it
              in near future.<br>
              &gt; &gt;<br>
              &gt; &gt;But contribution is welcomed everytime and we can
              provide assistance.<br>
              &gt; &gt;<br>
              &gt; &gt;LS<br>
              &gt; &gt;_______________________________________________<br>
              &gt; &gt;sssd-devel mailing list<br>
              &gt; &gt;<a moz-do-not-send="true"
                href="mailto:sssd-devel@lists.fedorahosted.org">sssd-devel@lists.fedorahosted.org</a><br>
              &gt; &gt;<a moz-do-not-send="true"
                href="https://lists.fedorahosted.org/mailman/listinfo/sssd-devel"
                target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-devel</a><br>
              &gt; Why do you need it? It is really bad idea to have
              hosts map.<br>
              &gt; DNS is the way to do.<br>
              <br>
            </span>Right, this is the direction Fedora has been pushing.<br>
            <br>
            In the meantime, you can still use nscd for the hosts map
            only.<br>
            <div class="HOEnZb">
              <div class="h5">_______________________________________________<br>
                sssd-devel mailing list<br>
                <a moz-do-not-send="true"
                  href="mailto:sssd-devel@lists.fedorahosted.org">sssd-devel@lists.fedorahosted.org</a><br>
                <a moz-do-not-send="true"
                  href="https://lists.fedorahosted.org/mailman/listinfo/sssd-devel"
                  target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-devel</a><br>
              </div>
            </div>
          </blockquote>
        </div>
        <br>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
sssd-devel mailing list
<a class="moz-txt-link-abbreviated" href="mailto:sssd-devel@lists.fedorahosted.org">sssd-devel@lists.fedorahosted.org</a>
<a class="moz-txt-link-freetext" href="https://lists.fedorahosted.org/mailman/listinfo/sssd-devel">https://lists.fedorahosted.org/mailman/listinfo/sssd-devel</a>
</pre>
    </blockquote>
    <br>
    <br>
    <pre class="moz-signature" cols="72">-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
  </body>
</html>