<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 03/18/2015 07:33 PM, Olivier wrote:<br>
</div>
<blockquote
cite="mid:CACgJ1oyfCHcrXq6OXOXQJzHt+UM=iEX8TaPrh=K18O7Jcia9sQ@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>
<div>
<div>Thanks for your replies,<br>
</div>
<div><br>
I found the ticket, that's why I asked : sounds to me a
hard job to plan, especially now with DNSEC validation
(and not sure that it would have a real added value)...
A "natural" way for sssd if really a plan might be to
catch zones from one of the ldap bakend available for
bind ?<br>
</div>
<div><br>
</div>
Anyway, the real reason I'm investigating : I'm
distributing sudo rules with ldap and I want to use
hostname to tell which host the rules appliy on. I have
told in nsswitch.conf to query the DNS to find out the
hostname but I'm not sure about how is collected the
hostname from the dns in the checking process (especially
if the machine has more than one interface) ? Is the label
considered as being the hostname the reverse of the IP
adress for the default interface ?<br>
</div>
</div>
</div>
<div>
<div><br>
</div>
</div>
</div>
</blockquote>
You know that you can use SSSD with sudo integration, right? SSSD
will take care of this for you automatically.<br>
<a class="moz-txt-link-freetext" href="http://www.freeipa.org/images/7/77/Freeipa30_SSSD_SUDO_Integration.pdf">http://www.freeipa.org/images/7/77/Freeipa30_SSSD_SUDO_Integration.pdf</a><br>
<br>
<br>
<blockquote
cite="mid:CACgJ1oyfCHcrXq6OXOXQJzHt+UM=iEX8TaPrh=K18O7Jcia9sQ@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>Thanks for any guidance,<br>
</div>
<div><br>
--<br>
</div>
<div>Olivier<br>
</div>
<div><br>
<br>
</div>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">2015-03-17 21:27 GMT+01:00 Jakub Hrozek
<span dir="ltr"><<a moz-do-not-send="true"
href="mailto:jhrozek@redhat.com" target="_blank">jhrozek@redhat.com</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex"><span
class="">On Tue, Mar 17, 2015 at 02:46:32PM -0400, Dmitri
Pal wrote:<br>
> On 03/17/2015 12:56 PM, Lukas Slebodnik wrote:<br>
> >On (17/03/15 17:26), Olivier wrote:<br>
> >>Hi everyone,<br>
> >><br>
> >>I was wondering if host requests caching is
still part of sssd plans :<br>
> >><a moz-do-not-send="true"
href="https://fedorahosted.org/sssd/ticket/359"
target="_blank">https://fedorahosted.org/sssd/ticket/359</a><br>
> >><br>
> >This ticket is in deferred section<br>
> >which means that we do not plan to implement it
in near future.<br>
> ><br>
> >But contribution is welcomed everytime and we can
provide assistance.<br>
> ><br>
> >LS<br>
> >_______________________________________________<br>
> >sssd-devel mailing list<br>
> ><a moz-do-not-send="true"
href="mailto:sssd-devel@lists.fedorahosted.org">sssd-devel@lists.fedorahosted.org</a><br>
> ><a moz-do-not-send="true"
href="https://lists.fedorahosted.org/mailman/listinfo/sssd-devel"
target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-devel</a><br>
> Why do you need it? It is really bad idea to have
hosts map.<br>
> DNS is the way to do.<br>
<br>
</span>Right, this is the direction Fedora has been pushing.<br>
<br>
In the meantime, you can still use nscd for the hosts map
only.<br>
<div class="HOEnZb">
<div class="h5">_______________________________________________<br>
sssd-devel mailing list<br>
<a moz-do-not-send="true"
href="mailto:sssd-devel@lists.fedorahosted.org">sssd-devel@lists.fedorahosted.org</a><br>
<a moz-do-not-send="true"
href="https://lists.fedorahosted.org/mailman/listinfo/sssd-devel"
target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-devel</a><br>
</div>
</div>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
sssd-devel mailing list
<a class="moz-txt-link-abbreviated" href="mailto:sssd-devel@lists.fedorahosted.org">sssd-devel@lists.fedorahosted.org</a>
<a class="moz-txt-link-freetext" href="https://lists.fedorahosted.org/mailman/listinfo/sssd-devel">https://lists.fedorahosted.org/mailman/listinfo/sssd-devel</a>
</pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>