Re: [SSSD] How to deal with multihomed machines [Re: [PATCHES] sudo failing for ad trusted user in IPA environment]

2012-11-13 Thread Jakub Hrozek
On Mon, Nov 12, 2012 at 10:10:25AM -0500, Simo Sorce wrote: On Mon, 2012-11-12 at 09:05 -0500, Dmitri Pal wrote: I changed the subject because this is a separate discussion and not a review of the patches. It is generally a good idea to be able to get SUDO rules from two different

Re: [SSSD] How to deal with multihomed machines [Re: [PATCHES] sudo failing for ad trusted user in IPA environment]

2012-11-13 Thread Simo Sorce
On Tue, 2012-11-13 at 13:13 +0100, Jakub Hrozek wrote: On Mon, Nov 12, 2012 at 10:10:25AM -0500, Simo Sorce wrote: On Mon, 2012-11-12 at 09:05 -0500, Dmitri Pal wrote: I changed the subject because this is a separate discussion and not a review of the patches. It is generally a

Re: [SSSD] How to deal with multihomed machines [Re: [PATCHES] sudo failing for ad trusted user in IPA environment]

2012-11-13 Thread Dmitri Pal
On 11/13/2012 09:24 AM, Simo Sorce wrote: On Tue, 2012-11-13 at 13:13 +0100, Jakub Hrozek wrote: On Mon, Nov 12, 2012 at 10:10:25AM -0500, Simo Sorce wrote: On Mon, 2012-11-12 at 09:05 -0500, Dmitri Pal wrote: I changed the subject because this is a separate discussion and not a review of

Re: [SSSD] How to deal with multihomed machines [Re: [PATCHES] sudo failing for ad trusted user in IPA environment]

2012-11-13 Thread Simo Sorce
On Tue, 2012-11-13 at 18:43 -0500, Dmitri Pal wrote: This is not always necessarily a problem. In some situations the 2 domains may exist for reasons that do not have much to do with level of trusts, meaning the 2 domains are within the same trust boundaries, however if the 2 domains are

Re: [SSSD] How to deal with multihomed machines [Re: [PATCHES] sudo failing for ad trusted user in IPA environment]

2012-11-12 Thread Dmitri Pal
On 11/12/2012 10:10 AM, Simo Sorce wrote: On Mon, 2012-11-12 at 09:05 -0500, Dmitri Pal wrote: I changed the subject because this is a separate discussion and not a review of the patches. It is generally a good idea to be able to get SUDO rules from two different domains. Think about a