On Fri, Feb 02, 2018 at 11:46:03AM +0100, Jakub Hrozek wrote:
> On Fri, Feb 02, 2018 at 10:07:08AM +0100, Sumit Bose wrote:
> > As an alternative, but even more complicated you can make the SID
> > available via D-Bus/InfoPipe and then lookup user and group by ID.
> > 
> > So it looks like sss_nss_getsidbyuid() and sss_nss_getsidbygid() should
> > be added to the interface. Would you mind to open a ticket about this on
> > https://pagure.io/SSSD/sssd/new_issue or do you prefer me doing this?
> 
> Maybe I misread your comment and you're actually proposing what I'm
> going to say, but can you think of a reason to not expose the SID (if
> availabel) on the D-Bus interface in the set of the default attributes?

no, I just meant that from a C client perspective it might be more
cumbersome and might add additional dependencies using the D-Bus
interface to get this information compared to a library call.

bye,
Sumit

> 
> Is there any information leak by this? I think not, because you can
> always open a python console for example and run the id-to-sid
> translation.
> _______________________________________________
> sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
> To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
_______________________________________________
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org

Reply via email to