Learn more about these different git repos.
Other Git URLs
I haven't thought this ticket through that much, but there is a need from some users to only include several groups in the getgrnam/getgrgid requests. It was suggested to use a custom LDAP filter, but it seems that method is too cumbersome.
This ticket tracks either explaining the filter better or perhaps adding a new filter option. Details tbd.
This is for example for Hadoop. The nodes care about specific set of groups that have a meaning in a Hadoop setup. There is no sense to pull all the groups from the central DS.
We will document that AD deployments must turn off tokengroup support and why. There is already some documentation in the man pages, but it's not sufficient.
summary: RFE: Handle setups that only wish to include certain groups => Document how to handle setups that only wish to include certain groups type: enhancement => task
Fields changed
milestone: NEEDS_TRIAGE => SSSD 1.12.5
This is my task
owner: somebody => jhrozek status: new => assigned
This is just a blog post
rhbz: => 0
https://jhrozek.wordpress.com/2016/12/09/restrict-the-set-of-groups-the-user-is-a-member-of-with-sssd/
resolution: => fixed sensitive: => 0 status: assigned => closed
Metadata Update from @jhrozek: - Issue assigned to jhrozek - Issue set to the milestone: SSSD 1.12.5
SSSD is moving from Pagure to Github. This means that new issues and pull requests will be accepted only in SSSD's github repository.
This issue has been cloned to Github and is available here: - https://github.com/SSSD/sssd/issues/3612
If you want to receive further updates on the issue, please navigate to the github issue and click on subscribe button.
subscribe
Thank you for understanding. We apologize for all inconvenience.
Login to comment on this ticket.