Hi,
Using legacy daemon "nslcd" with "aliases: files ldap" switch in nsswitch.conf I can list all aliases from our ldap backend using "getent -s ldap aliases". If I switch to sssd and trying "aliases: files sss" in nsswitch.conf, "getent -s sss aliases" query is empty.
also note that in our environment "nslcd.conf" had to be tweaked using these entries for "getent aliases" to work: filter aliases (objectClass=mailRecipient) map aliases rfc822MailMember mail
I wonder if sssd support caching aliases database like nslcd does? - If it does, how can I configure sssd to filter and map the aliases queries like nslcd.conf above? - If not will it be supported in the future?
Regards, Pierre
On Mon, May 09, 2016 at 02:01:51PM -0000, Pierre Aho wrote:
Hi,
Using legacy daemon "nslcd" with "aliases: files ldap" switch in nsswitch.conf I can list all aliases from our ldap backend using "getent -s ldap aliases". If I switch to sssd and trying "aliases: files sss" in nsswitch.conf, "getent -s sss aliases" query is empty.
also note that in our environment "nslcd.conf" had to be tweaked using these entries for "getent aliases" to work: filter aliases (objectClass=mailRecipient) map aliases rfc822MailMember mail
I wonder if sssd support caching aliases database like nslcd does?
- If it does, how can I configure sssd to filter and map the aliases queries like nslcd.conf above?
No, the aliases map is not supported at the moment..
- If not will it be supported in the future?
..and currently not even planned to be honest. You can file a bug at https://fedorahosted.org/sssd/newticket but since this is (IIRC) the first request to implement the aliases database, patches would be mostly welcome here.
Hi,
Ok, thanks for the info. At least I can stop digging for a solution now and use a workaround :) I'll see what we can do with the feature request as well.
Regards, Pierre
sssd-users@lists.fedorahosted.org
-
Jakub Hrozek -
Pierre Aho