Starting SSSD without root
by Tero Saarni
Hi,
I'm trying to run SSSD inside docker container without root user. The
container is executed in OpenShift cluster which does not allow running as root
inside container.
SSSD requires root and checks for this specifically.
Is there any workaround for this?
I believe the limitation is implemented for security reasons, in order to have
most critical parts executed as root and have it drop privileges for other
parts but this now completely blocks using SSSD in the above environment.
--
Tero
2 weeks, 3 days
Only IPv4 addresses in /var/lib/sss/pubconf/kdcinfo.DOMAIN
by Brian J. Murrell
On my dual-stack network where some machines actually don't have IPv4
connectivity I am finding that whatever is writing IP addresses into
/var/lib/sss/pubconf/kdcinfo.DOMAIN is only writing the IPv4 addresses
and not the KDC's IPv6 addresses.
The result is that such an IPv6 machine cannot reach a KDC until I
remove that file. It ends up being recreated at some subsequent point
again with only the KDC's IPv4 addresses.
Is this a bug or a problem with my configuration?
Cheers,
b.
9 months, 1 week
files domain and getent passwd
by Patrick Riehecky
Is there a way to get results in `getent passwd` from a files domain
with enumerate=false?
relevant domain snippet:
[domain/FNAL.GOV]
auth_provider=krb5
id_provider=files
enumerate=false
When I change from `enumerate=false` to `enumerate=true` I get
everything I'd expect from `getent passwd`.
The load time on my enormous file is painful with enumerate=true.
Pat
1 year, 1 month
