[Fedora-packaging] Static UIDs and GIDs

Stephen Gallagher sgallagh at redhat.com
Fri Apr 12 11:27:39 UTC 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 04/11/2013 03:30 PM, "Jóhann B. Guðmundsson" wrote:
> On 04/11/2013 06:57 PM, Toshio Kuratomi wrote:
>> We (the FPC) would love to have feedback on the draft and
>> comments to help iron out issues that it may cause.
> 
> Based on experience storing system related uid's and gid's in ldap
> is a bad idea ( what happens if you cant reach your ldap ) and I
> would argue bad practice and we should rather keep them static and
> try to unite them between varios *nixes instead.
> 
> What purpose and how useful will /etc/services be with this
> change?
> 

That was true once upon a time, but I'd like to mention that in the
era of SSSD for user-ID lookups, there are a great many deployments
out there using LDAP for such IDs quite successfully. (The main reason
for this is that SSSD has much safer persistent ID caching when LDAP
cannot be reached than nscd/nss_ldap used to).

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlFn76sACgkQeiVVYja6o6OAawCff3AjT5VHgofWUCWLX2560VBX
yXMAn3jixwEEpTBtrcbtP7PAdk2hfab4
=oXQK
-----END PGP SIGNATURE-----


More information about the packaging mailing list