> Could you please describe your use case in greater details?
>
> Who is the consumer of services provided by sssd? What backends (data
> sources) do you plan to use?
Thank you for your response.
The consumer is a custom (existing) application that depends on PAM libraries.
The data source
Lukas Slebodnik wrote:
> There is a way how to run sssd as non-root but /usr/sbin/sssd still require
> bunch of linux capabilities to achieve that.
Thank you for very detailed response!
--
Tero
___
sssd-users mailing list --
Hi,
I'm trying to run SSSD inside docker container without root user. The
container is executed in OpenShift cluster which does not allow running as root
inside container.
SSSD requires root and checks for this specifically.
Is there any workaround for this?
I believe the limitation is
> Does it mean your application is run within the same container as sssd?
> If this is the case, this might be not the best idea, as due to caching in
> every instance (and other reasons) this might turn out to be a very "heavy"
> solution...
Yes the application runs in the same container as
Lukas Slebodnik wrote:
> There is a way how to run sssd as non-root but /usr/sbin/sssd still require
> bunch of linux capabilities to achieve that.
One more question, which I should have mentioned in my previous reply.
Since there are few places in the code that check explicitly for root and
On Thu, Mar 21, 2024 at 10:21 PM Alexey Tikhonov
wrote:
> It's been awhile but... quite a lot of work has been done:
> see https://github.com/SSSD/sssd/issues/5443#issuecomment-2013505460 for
> the list
> and TODO list in the description of https://github.com/SSSD/sssd/pull/7193
> for remaining
On Fri, Mar 22, 2024 at 3:46 PM Alexey Tikhonov wrote:
> Is this a "single UID" container (i.e. SSSD and client apps run under the
> same UID within container namespace)?
> What do you use as an entry point of the container / how do you manage
> (start of) multiple processes?
>
> What
On Tue, Apr 9, 2024 at 1:34 PM Alexey Tikhonov wrote:
> On Mon, Apr 8, 2024 at 9:22 PM Tero Saarni wrote:
>
>> Actually, I did not use the packages. I compiled myself from github
>> master.
>>
>
> What ./configure options do you use?
>
>
Right, I had a d
>
>
> What platform is this? Is it still
> ```
> The container is executed in OpenShift cluster which does not allow
> running as root inside container.
> ```
> as in your original email in this thread?
>
> JFTR: Openshift should eventually get
>
On Mon, Apr 8, 2024 at 10:10 PM Alexey Tikhonov wrote:
>
> Out of curiosity: I realized that 'sssd/nightly' packages are built with
> 'systemd' support and thus 'Requires:" it. How did you work around this?
> I have another PR - https://github.com/SSSD/sssd/pull/7262 - that I use
> as a
10 matches
Mail list logo
