Re: [Freeipa-users] meaning of several domains in sssd.conf

2013-02-27 Thread Jakub Hrozek
On Wed, Feb 27, 2013 at 09:47:39AM +0100, Jan-Frode Myklebust wrote: > On Wed, Feb 27, 2013 at 09:31:43AM +0100, Jakub Hrozek wrote: > > > > Are there any issues you are seeing with IPA's sssd_be? It would > > definitely be better to fix those first rather than attempting a > > workaround like thi

Re: [Freeipa-users] meaning of several domains in sssd.conf

2013-02-27 Thread Jan-Frode Myklebust
On Wed, Feb 27, 2013 at 09:31:43AM +0100, Jakub Hrozek wrote: > > Are there any issues you are seeing with IPA's sssd_be? It would > definitely be better to fix those first rather than attempting a > workaround like this. I've earlier been hit by a bug in nested groups (or netgroups) where the ip

Re: [Freeipa-users] meaning of several domains in sssd.conf

2013-02-27 Thread Jakub Hrozek
On Wed, Feb 27, 2013 at 08:19:27AM +0100, Jan-Frode Myklebust wrote: > What does it mean to have several domains listed in sssd.conf ? Will > they all be queried on each login, or will only the first domain be > queried if the user/groups is found there? > If the user is found in the first domain

[Freeipa-users] meaning of several domains in sssd.conf

2013-02-26 Thread Jan-Frode Myklebust
What does it mean to have several domains listed in sssd.conf ? Will they all be queried on each login, or will only the first domain be queried if the user/groups is found there? Does having an IPA domain, and an LDAP domain pointing at the same servers give any protection against failures in the