Re: [Freeipa-users] rhel 6.7 upgrade - sssd/sudo

2015-09-24 Thread Pavel Reichl

Hello Andy,

I understand that you run sssd-1.12.4-47.el6.x86_64 on ipa client, right?

What version of SSSD do you run on ipa server?

--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


Re: [Freeipa-users] rhel 6.7 upgrade - sssd/sudo

2015-09-24 Thread Pavel Reichl

On 09/24/2015 02:50 PM, Andy Thompson wrote:

-Original Message-
From: freeipa-users-boun...@redhat.com [mailto:freeipa-users-
boun...@redhat.com] On Behalf Of Pavel Reichl
Sent: Thursday, September 24, 2015 5:18 AM
To: freeipa-users@redhat.com
Subject: Re: [Freeipa-users] rhel 6.7 upgrade - sssd/sudo

Hello Andy,

I understand that you run sssd-1.12.4-47.el6.x86_64 on ipa client, right?

What version of SSSD do you run on ipa server?



The servers are running

sssd-1.12.2-58.el7_1.14.x86_64

-andy


Thanks, I prepared a scratch build containing patches for 
https://fedorahosted.org/sssd/ticket/2633 that could be fix your problems. 
Please consider installing the build on you ipa server but please avoid using 
it in production environment. Thanks!

https://copr.fedoraproject.org/coprs/preichl/fix_ext_grp/

--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


[Freeipa-users] Sensible defaults for a new major SSSD release

2015-05-28 Thread Pavel Reichl

Hello,

as part of solution for https://fedorahosted.org/sssd/ticket/2583 ([RFE] 
Homedir is always overwritten with subdomain_homedir value in server 
mode) we came to the conclusion that it would be a good thing for SSSD 
in IPA server mode to change default value of subdomain_homedir from 
/home/%d/%u to /home/%o (where %o is original user home directory) and 
also set fallback_homedir to /home/%d/%u to handle cases when user 
doesn't have home directory attribute set.


Do you have any opinions about this change?

Thanks!

--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project