Hi Tero,

On Mon, Apr 8, 2024 at 8:13 PM Tero Saarni <[email protected]> wrote:

>
> Having said that, and taking into account 'user-ns' support isn't
>> available yet, you might want to try builds from
>> https://copr.fedorainfracloud.org/coprs/g/sssd/nightly/ : currently
>> Fedora rawhide, Centos-stream 9 and Rhel 9 packages there are built
>> '--with-sssd-user=sssd' and main SSSD process can be run directly under
>> 'sssd' user.
>>
>> Since you don't need Kerberos / handle keytabs and user TGTs, it should
>> work out of the box.
>>
>> Your feedback and observations are welcome.
>>
>>
> Hi Alexey,
>
> I tried and it did work.
>

Out of curiosity: I realized that 'sssd/nightly' packages are built with
'systemd' support and thus 'Requires:" it. How did you work around this?
I have another PR - https://github.com/SSSD/sssd/pull/7262 - that I use as
a playground to build "minimal dependencies" SSSD, more suitable to run
within a container (copr builds are available at
https://copr.fedorainfracloud.org/coprs/g/sssd/pr7262/ )
Those builds don't require 'systemd' explicitly, but they require libdbus-1
that, unfortunately, requires libsystemd.


>   Do you have a plan for a release schedule for the feature?
>

Do you mean "improved ability to run under 'sssd' user"?
There are quite a few issues that remain to be addressed.
We cautiously plan to have an upstream release in time to use it in Fedora
41 and RHEL10, but **no promises**.
--
_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to