[prev in list] [next in list] [prev in thread] [next in thread] 

List:       sssd-devel
Subject:    =?utf-8?b?W1NTU0Rd?= [sssd PR#522][comment] Prepare SSSD to support IPA in trust to Samba AD
From:       abbra <sssd-github-notification () fedorahosted ! org>
Date:       2018-02-28 10:04:59
Message-ID: gh-SSSD/sssd-522-2018-031a7baf-6c4d-4f6a-af0e-9f7bad712b4d () sssd-github-notification ! fedorahosted ! org
[Download RAW message or body]

[Attachment #2 (unknown)]

  URL: https://github.com/SSSD/sssd/pull/522
Title: #522: Prepare SSSD to support IPA in trust to Samba AD

abbra commented:
"""
@jhrozek @sumit-bose I've updated the patches to address Jakub's comments.TDO lookup \
should only be performed in the server mode, so I added that. At the server side \
there will be ACIs limiting this access to `cn=adtrust agents` members (e.g. SSSD and \
smbd on IPA masters) only. I also added a filter `(objectclass=ipaIDObject)` which \
will be used by the TDO objects.

I'm going to test it more extensively today.
"""

See the full comment at https://github.com/SSSD/sssd/pull/522#issuecomment-369189670


[Attachment #3 (text/plain)]

_______________________________________________
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-leave@lists.fedorahosted.org


[prev in list] [next in list] [prev in thread] [next in thread]