[New: openFATE 308902] Configure SSSD via Yast
Feature added by: David Alston (dalston) Feature #308902, revision 1 Title: Configure SSSD via Yast openSUSE-11.3: Unconfirmed Priority Requester: Important Requested by: David Alston (dalston) Description: It would be great if we could configure the SSSD package (http://fedoraproject.org/wiki/Features/SSSD) for local user/password sync with either LDAP or Kerberos for offline authentication with Yast. This is related to https://features.opensuse.org/308900 This is important if OpenSUSE is interested in being a significant presence in Enterprise environments. -- openSUSE Feature: https://features.opensuse.org/308902
Feature changed by: Bidossessi SODONON (bidossessi) Feature #308902, revision 2 Title: Configure SSSD via Yast openSUSE-11.3: Unconfirmed Priority Requester: Important Requested by: David Alston (dalston) Description: It would be great if we could configure the SSSD package (http://fedoraproject.org/wiki/Features/SSSD) for local user/password sync with either LDAP or Kerberos for offline authentication with Yast. This is related to https://features.opensuse.org/308900 This is important if OpenSUSE is interested in being a significant presence in Enterprise environments. + Discussion: + #1: Bidossessi SODONON (bidossessi) (2010-02-04 16:19:02) + I discovered the existence of this package through the hermes feed, and + i must say this is a MAJOR feature that should be included as soon as + it is declared stable. + I use Gonicus' Gosa for my users' accounts, and i had to fallback to + local because our network is a bit flaky and users would be locked out + of their machines time and time again (mandated wireless and lots of + power outages). + SSSD (or any equivalent) would mean the end of my remote user- + management nightmares in a multi-site all-openSUSE network. + I would strongly recommend it be reviewed. -- openSUSE Feature: https://features.opensuse.org/308902
Feature changed by: Ralf Haferkamp (rhafer) Feature #308902, revision 3 Title: Configure SSSD via Yast openSUSE-11.3: Unconfirmed Priority Requester: Important + openSUSE-11.4: Unconfirmed + Priority + Requester: Mandatory Requested by: David Alston (dalston) Description: It would be great if we could configure the SSSD package (http://fedoraproject.org/wiki/Features/SSSD) for local user/password sync with either LDAP or Kerberos for offline authentication with Yast. This is related to https://features.opensuse.org/308900 This is important if OpenSUSE is interested in being a significant presence in Enterprise environments. Discussion: #1: Bidossessi SODONON (bidossessi) (2010-02-04 16:19:02) I discovered the existence of this package through the hermes feed, and i must say this is a MAJOR feature that should be included as soon as it is declared stable. I use Gonicus' Gosa for my users' accounts, and i had to fallback to local because our network is a bit flaky and users would be locked out of their machines time and time again (mandated wireless and lots of power outages). SSSD (or any equivalent) would mean the end of my remote user- management nightmares in a multi-site all-openSUSE network. I would strongly recommend it be reviewed. -- openSUSE Feature: https://features.opensuse.org/308902
Feature changed by: Andreas Jaeger (a_jaeger) Feature #308902, revision 4 Title: Configure SSSD via Yast - openSUSE-11.3: Unconfirmed + openSUSE-11.3: Rejected by (a_jaeger) + reject date: 2010-07-20 09:29:40 + reject reason: not done in time. Priority Requester: Important - openSUSE-11.4: Unconfirmed + openSUSE-11.4: Evaluation Priority Requester: Mandatory + Info Provider: (Novell) Requested by: David Alston (dalston) Description: It would be great if we could configure the SSSD package (http://fedoraproject.org/wiki/Features/SSSD) for local user/password sync with either LDAP or Kerberos for offline authentication with Yast. This is related to https://features.opensuse.org/308900 - This is important if OpenSUSE is interested in being a significant + This is important if openSUSE is interested in being a significant presence in Enterprise environments. Discussion: #1: Bidossessi SODONON (bidossessi) (2010-02-04 16:19:02) I discovered the existence of this package through the hermes feed, and i must say this is a MAJOR feature that should be included as soon as it is declared stable. I use Gonicus' Gosa for my users' accounts, and i had to fallback to local because our network is a bit flaky and users would be locked out of their machines time and time again (mandated wireless and lots of power outages). SSSD (or any equivalent) would mean the end of my remote user- management nightmares in a multi-site all-openSUSE network. I would strongly recommend it be reviewed. -- openSUSE Feature: https://features.opensuse.org/308902
Feature changed by: Federico Lucifredi (flucifredi) Feature #308902, revision 6 Title: Configure SSSD via Yast - openSUSE-11.3: Rejected by (a_jaeger) + openSUSE-11.3: Rejected by Federico Lucifredi (a_jaeger) reject date: 2010-07-20 09:29:40 reject reason: not done in time. Priority Requester: Important openSUSE-11.4: Evaluation Priority Requester: Mandatory Info Provider: (Novell) Requested by: David Alston (dalston) Description: It would be great if we could configure the SSSD package (http://fedoraproject.org/wiki/Features/SSSD) for local user/password sync with either LDAP or Kerberos for offline authentication with Yast. This is related to https://features.opensuse.org/308900 This is important if openSUSE is interested in being a significant presence in Enterprise environments. Discussion: #1: Bidossessi SODONON (bidossessi) (2010-02-04 16:19:02) I discovered the existence of this package through the hermes feed, and i must say this is a MAJOR feature that should be included as soon as it is declared stable. I use Gonicus' Gosa for my users' accounts, and i had to fallback to local because our network is a bit flaky and users would be locked out of their machines time and time again (mandated wireless and lots of power outages). SSSD (or any equivalent) would mean the end of my remote user- management nightmares in a multi-site all-openSUSE network. I would strongly recommend it be reviewed. -- openSUSE Feature: https://features.opensuse.org/308902
Feature changed by: Klaus Kämpf (kwk) Feature #308902, revision 7 Title: Configure SSSD via Yast openSUSE-11.3: Rejected by Federico Lucifredi (a_jaeger) reject date: 2010-07-20 09:29:40 reject reason: not done in time. Priority Requester: Important openSUSE-11.4: Evaluation Priority Requester: Mandatory - Info Provider: (Novell) Requested by: David Alston (dalston) Description: It would be great if we could configure the SSSD package (http://fedoraproject.org/wiki/Features/SSSD) for local user/password sync with either LDAP or Kerberos for offline authentication with Yast. This is related to https://features.opensuse.org/308900 This is important if openSUSE is interested in being a significant presence in Enterprise environments. Discussion: #1: Bidossessi SODONON (bidossessi) (2010-02-04 16:19:02) I discovered the existence of this package through the hermes feed, and i must say this is a MAJOR feature that should be included as soon as it is declared stable. I use Gonicus' Gosa for my users' accounts, and i had to fallback to local because our network is a bit flaky and users would be locked out of their machines time and time again (mandated wireless and lots of power outages). SSSD (or any equivalent) would mean the end of my remote user- management nightmares in a multi-site all-openSUSE network. I would strongly recommend it be reviewed. -- openSUSE Feature: https://features.opensuse.org/308902
Feature changed by: Stanislav Visnovsky (visnov) Feature #308902, revision 9 Title: Configure SSSD via Yast - openSUSE-11.3: Rejected by Federico Lucifredi (a_jaeger) + openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger) reject date: 2010-07-20 09:29:40 reject reason: not done in time. Priority Requester: Important openSUSE-11.4: Evaluation Priority Requester: Mandatory Requested by: David Alston (dalston) Description: It would be great if we could configure the SSSD package (http://fedoraproject.org/wiki/Features/SSSD) for local user/password sync with either LDAP or Kerberos for offline authentication with Yast. This is related to https://features.opensuse.org/308900 This is important if openSUSE is interested in being a significant presence in Enterprise environments. Discussion: #1: Bidossessi SODONON (bidossessi) (2010-02-04 16:19:02) I discovered the existence of this package through the hermes feed, and i must say this is a MAJOR feature that should be included as soon as it is declared stable. I use Gonicus' Gosa for my users' accounts, and i had to fallback to local because our network is a bit flaky and users would be locked out of their machines time and time again (mandated wireless and lots of power outages). SSSD (or any equivalent) would mean the end of my remote user- management nightmares in a multi-site all-openSUSE network. I would strongly recommend it be reviewed. -- openSUSE Feature: https://features.opensuse.org/308902
Feature changed by: Ralf Haferkamp (rhafer) Feature #308902, revision 11 Title: Configure SSSD via Yast openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger) reject date: 2010-07-20 09:29:40 reject reason: not done in time. Priority Requester: Important openSUSE-11.4: Evaluation Priority Requester: Mandatory + Info Provider: (Novell) Requested by: David Alston (dalston) Description: It would be great if we could configure the SSSD package (http://fedoraproject.org/wiki/Features/SSSD) for local user/password sync with either LDAP or Kerberos for offline authentication with Yast. This is related to https://features.opensuse.org/308900 This is important if openSUSE is interested in being a significant presence in Enterprise environments. + Relations: + - original request to include sssd (feature/id: 308900) + - related Feature (feature/id: 310176) + - More info about sssd (url: ) Discussion: #1: Bidossessi SODONON (bidossessi) (2010-02-04 16:19:02) I discovered the existence of this package through the hermes feed, and i must say this is a MAJOR feature that should be included as soon as it is declared stable. I use Gonicus' Gosa for my users' accounts, and i had to fallback to local because our network is a bit flaky and users would be locked out of their machines time and time again (mandated wireless and lots of power outages). SSSD (or any equivalent) would mean the end of my remote user- management nightmares in a multi-site all-openSUSE network. I would strongly recommend it be reviewed. + #6: Ralf Haferkamp (rhafer) (2010-11-10 14:17:51) + One remaining question here is whether we want YaST to support both + types of setup or if to switch to sssd completely. I just checked how + this is handled in Fedora 14 currently. And it seems that they support + both types of setups in their GUI tools, depending on what packages are + installed in the system. + * If the sssd package is installed in the system (it seems to be in + their default installation), sssd is configured. + * If nss-pam-ldapd (which is kind of a successor to nss_ldap/pam_ldap, + we also have packages for that) is installed they configure that. + * If none of the above packages is installed (e.g. you choose a minimal + installation) they suggest to install nss-pam-ldapd. (Which is kind of + strange) + (IMO leaving support for nss_ldap/pam_ldap inplace in the yast2-ldap- + client module for now is a good idea. Provided that is doesn't create + too much effort. I'll add some details about what the sssd setup looks + like here next.) + Setting needinfo to aj@novell.com to give his point of view here. -- openSUSE Feature: https://features.opensuse.org/308902
Feature changed by: Andreas Jaeger (a_jaeger) Feature #308902, revision 12 Title: Configure SSSD via Yast openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger) reject date: 2010-07-20 09:29:40 reject reason: not done in time. Priority Requester: Important openSUSE-11.4: Evaluation Priority Requester: Mandatory - Info Provider: (Novell) Requested by: David Alston (dalston) Description: It would be great if we could configure the SSSD package (http://fedoraproject.org/wiki/Features/SSSD) for local user/password sync with either LDAP or Kerberos for offline authentication with Yast. This is related to https://features.opensuse.org/308900 This is important if openSUSE is interested in being a significant presence in Enterprise environments. Relations: - original request to include sssd (feature/id: 308900) - related Feature (feature/id: 310176) - More info about sssd (url: ) Discussion: #1: Bidossessi SODONON (bidossessi) (2010-02-04 16:19:02) I discovered the existence of this package through the hermes feed, and i must say this is a MAJOR feature that should be included as soon as it is declared stable. I use Gonicus' Gosa for my users' accounts, and i had to fallback to local because our network is a bit flaky and users would be locked out of their machines time and time again (mandated wireless and lots of power outages). SSSD (or any equivalent) would mean the end of my remote user- management nightmares in a multi-site all-openSUSE network. I would strongly recommend it be reviewed. #6: Ralf Haferkamp (rhafer) (2010-11-10 14:17:51) One remaining question here is whether we want YaST to support both types of setup or if to switch to sssd completely. I just checked how this is handled in Fedora 14 currently. And it seems that they support both types of setups in their GUI tools, depending on what packages are installed in the system. * If the sssd package is installed in the system (it seems to be in their default installation), sssd is configured. * If nss-pam-ldapd (which is kind of a successor to nss_ldap/pam_ldap, we also have packages for that) is installed they configure that. * If none of the above packages is installed (e.g. you choose a minimal installation) they suggest to install nss-pam-ldapd. (Which is kind of strange) (IMO leaving support for nss_ldap/pam_ldap inplace in the yast2-ldap- client module for now is a good idea. Provided that is doesn't create too much effort. I'll add some details about what the sssd setup looks like here next.) Setting needinfo to aj@novell.com to give his point of view here. + #7: Andreas Jaeger (a_jaeger) (2010-11-10 14:34:54) (reply to #6) + We currently have some hacks in glibc due to nss_ldap usage. I would + prefer to remove those hacks but you have to tell me whether it makes + sense to support both or not. So, I'm in favor of moving to sssd + completely but you have to tell us whether we really need + nss_ldap/pam_ldap. -- openSUSE Feature: https://features.opensuse.org/308902
Feature changed by: Ralf Haferkamp (rhafer)
Feature #308902, revision 13
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Evaluation by project manager
Priority
Requester: Mandatory
Requested by: David Alston (dalston)
Product Manager: (Novell)
Product Manager: (Novell)
Project Manager: (Novell)
Engineering Manager: (Novell)
Technical Contact: (Novell)
Partner organization: openSUSE.org
Description:
- It would be great if we could configure the SSSD package
- (http://fedoraproject.org/wiki/Features/SSSD) for local user/password
- sync with either LDAP or Kerberos for offline authentication with Yast.
- This is related to https://features.opensuse.org/308900
+ It would be great if we could configure the SSSD package (
+ http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
+ ) for local user/password sync with either LDAP or Kerberos for offline
+ authentication with Yast.
+ This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
+ SSSD configuration
+ sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
+ and documented in the sssd.conf(5) man page. It made up of the multiple
+ sections.
+ [sssd] section: The " domains " setting should be un-commented and set
+ to the special domain " default " for now. The " services " setting
+ should have the value " nss, pam ". Everything else can be left
+ untouched here for now.
+ The [nss] and [pam] sections can be taken as shipped in the package.
+ Make sure that " filter_groups " and " filter_users " in the [nss]
+ section contains " root ".
+ The rest of the settings are done in the " [domain/default] " section
+ (create one if it does not exist yet). For a plain LDAP setup the
+ section should have the following settings:
+ ldap_uri =
Feature changed by: Ralf Haferkamp (rhafer)
Feature #308902, revision 14
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Evaluation by project manager
Priority
Requester: Mandatory
Requested by: David Alston (dalston)
Product Manager: (Novell)
Product Manager: (Novell)
Project Manager: (Novell)
Engineering Manager: (Novell)
Technical Contact: (Novell)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the SSSD package (
http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
) for local user/password sync with either LDAP or Kerberos for offline
authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The " domains " setting should be un-commented and set
to the special domain " default " for now. The " services " setting
should have the value " nss, pam ". Everything else can be left
untouched here for now.
The [nss] and [pam] sections can be taken as shipped in the package.
Make sure that " filter_groups " and " filter_users " in the [nss]
section contains " root ".
The rest of the settings are done in the " [domain/default] " section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Ralf Haferkamp (rhafer)
Feature #308902, revision 15
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Evaluation by project manager
Priority
Requester: Mandatory
Requested by: David Alston (dalston)
Product Manager: (Novell)
Product Manager: (Novell)
Project Manager: (Novell)
Engineering Manager: (Novell)
Technical Contact: (Novell)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the SSSD package (
http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
) for local user/password sync with either LDAP or Kerberos for offline
authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
- [sssd] section: The " domains " setting should be un-commented and set
- to the special domain " default " for now. The " services " setting
- should have the value " nss, pam ". Everything else can be left
- untouched here for now.
- The [nss] and [pam] sections can be taken as shipped in the package.
- Make sure that " filter_groups " and " filter_users " in the [nss]
- section contains " root ".
+ [sssd] section: The "domains" setting should be un-commented and set to
+ the special domain "default" for now. The "services" setting should
+ have the value "nss, pam". Everything else can be left untouched here
+ for now.
+ The "[nss]" and "[pam]" sections can be taken as shipped in the
+ package. Make sure that "filter_groups" and "filter_users" in the
+ "[nss]" section contains "root".
The rest of the settings are done in the " [domain/default] " section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Ralf Haferkamp (rhafer)
Feature #308902, revision 16
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Evaluation by project manager
Priority
Requester: Mandatory
Requested by: David Alston (dalston)
Product Manager: (Novell)
Product Manager: (Novell)
Project Manager: (Novell)
Engineering Manager: (Novell)
Technical Contact: (Novell)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the SSSD package (
http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
) for local user/password sync with either LDAP or Kerberos for offline
authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Ralf Haferkamp (rhafer)
Feature #308902, revision 17
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Evaluation by project manager
Priority
Requester: Mandatory
Requested by: David Alston (dalston)
Product Manager: (Novell)
Product Manager: (Novell)
Project Manager: (Novell)
Engineering Manager: (Novell)
Technical Contact: (Novell)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the SSSD package (
http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
) for local user/password sync with either LDAP or Kerberos for offline
authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Jiří Suchomel (jsuchome)
Feature #308902, revision 18
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Evaluation by project manager
Priority
Requester: Mandatory
Requested by: David Alston (dalston)
Product Manager: (Novell)
Product Manager: (Novell)
Project Manager: (Novell)
Engineering Manager: (Novell)
Technical Contact: (Novell)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the SSSD package (
http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
) for local user/password sync with either LDAP or Kerberos for offline
authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Ralf Haferkamp (rhafer)
Feature #308902, revision 19
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Evaluation by project manager
Priority
Requester: Mandatory
Requested by: David Alston (dalston)
Product Manager: (Novell)
Product Manager: (Novell)
Project Manager: (Novell)
Engineering Manager: (Novell)
Technical Contact: (Novell)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the SSSD package (
http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
) for local user/password sync with either LDAP or Kerberos for offline
authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Ralf Haferkamp (rhafer)
Feature #308902, revision 20
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
- openSUSE-11.4: Evaluation by project manager
+ openSUSE-11.4: Implementation
Priority
Requester: Mandatory
+ Info Provider: (Novell)
Requested by: David Alston (dalston)
Product Manager: (Novell)
Product Manager: (Novell)
Project Manager: (Novell)
Engineering Manager: (Novell)
+ Developer: (Novell)
Technical Contact: (Novell)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the SSSD package (
http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
) for local user/password sync with either LDAP or Kerberos for offline
authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Jiří Suchomel (jsuchome)
Feature #308902, revision 21
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Implementation
Priority
Requester: Mandatory
Info Provider: (Novell)
Requested by: David Alston (dalston)
Product Manager: (Novell)
Product Manager: (Novell)
Project Manager: (Novell)
Engineering Manager: (Novell)
Developer: (Novell)
Technical Contact: (Novell)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the SSSD package (
http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
) for local user/password sync with either LDAP or Kerberos for offline
authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Ralf Haferkamp (rhafer)
Feature #308902, revision 22
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Implementation
Priority
Requester: Mandatory
Info Provider: (Novell)
Requested by: David Alston (dalston)
Product Manager: (Novell)
Product Manager: (Novell)
Project Manager: (Novell)
Engineering Manager: (Novell)
Developer: (Novell)
Technical Contact: (Novell)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the SSSD package (
http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
) for local user/password sync with either LDAP or Kerberos for offline
authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Jiří Suchomel (jsuchome)
Feature #308902, revision 23
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Implementation
Priority
Requester: Mandatory
Info Provider: (Novell)
Requested by: David Alston (dalston)
Product Manager: (Novell)
Product Manager: (Novell)
Project Manager: (Novell)
Engineering Manager: (Novell)
Developer: (Novell)
Technical Contact: (Novell)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the SSSD package (
http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
) for local user/password sync with either LDAP or Kerberos for offline
authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Ralf Haferkamp (rhafer)
Feature #308902, revision 24
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Implementation
Priority
Requester: Mandatory
Info Provider: (Novell)
Requested by: David Alston (dalston)
Product Manager: (Novell)
Product Manager: (Novell)
Project Manager: (Novell)
Engineering Manager: (Novell)
Developer: (Novell)
Technical Contact: (Novell)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the SSSD package (
http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
) for local user/password sync with either LDAP or Kerberos for offline
authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Jiří Suchomel (jsuchome)
Feature #308902, revision 25
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
- openSUSE-11.4: Implementation
+ openSUSE-11.4: Done
Priority
Requester: Mandatory
Info Provider: (Novell)
Requested by: David Alston (dalston)
Product Manager: (Novell)
Product Manager: (Novell)
Project Manager: (Novell)
Engineering Manager: (Novell)
Developer: (Novell)
Technical Contact: (Novell)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the SSSD package (
http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
) for local user/password sync with either LDAP or Kerberos for offline
authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Matthias Eckermann (mge1512)
Feature #308902, revision 26
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Done
Priority
Requester: Mandatory
Info Provider: (Novell)
Requested by: David Alston (dalston)
Product Manager: (Novell)
Product Manager: (Novell)
Project Manager: (Novell)
Engineering Manager: (Novell)
Developer: (Novell)
Technical Contact: (Novell)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the SSSD package (
http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
) for local user/password sync with either LDAP or Kerberos for offline
authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Jiří Suchomel (jsuchome)
Feature #308902, revision 27
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Done
Priority
Requester: Mandatory
Info Provider: (Novell)
Requested by: David Alston (dalston)
Product Manager: (Novell)
Product Manager: (Novell)
Project Manager: (Novell)
Engineering Manager: (Novell)
Developer: (Novell)
Technical Contact: (Novell)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the SSSD package (
http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
) for local user/password sync with either LDAP or Kerberos for offline
authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Jiri Srain (jsrain)
Feature #308902, revision 31
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Done
Priority
Requester: Mandatory
Info Provider: (Novell)
Requested by: David Alston (dalston)
Product Manager: (Novell)
Product Manager: (Novell)
Project Manager: (Novell)
Engineering Manager: (Novell)
+ Engineering Manager: (Novell)
Developer: (Novell)
Technical Contact: (Novell)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the SSSD package (
http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
) for local user/password sync with either LDAP or Kerberos for offline
authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Jiří Suchomel (jsuchome)
Feature #308902, revision 33
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Done
Priority
Requester: Mandatory
Info Provider: (Novell)
Requested by: David Alston (dalston)
Product Manager: (Novell)
Product Manager: (Novell)
Project Manager: (Novell)
Engineering Manager: (Novell)
Engineering Manager: (Novell)
Developer: (Novell)
Technical Contact: (Novell)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the SSSD package (
http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
) for local user/password sync with either LDAP or Kerberos for offline
authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Ralf Haferkamp (rhafer)
Feature #308902, revision 35
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Done
Priority
Requester: Mandatory
- Info Provider: (Novell)
Requested by: David Alston (dalston)
Product Manager: (Novell)
Product Manager: (Novell)
Project Manager: (Novell)
Engineering Manager: (Novell)
Engineering Manager: (Novell)
Developer: (Novell)
Technical Contact: (Novell)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the SSSD package (
http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
) for local user/password sync with either LDAP or Kerberos for offline
authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Lukas Ocilka (locilka)
Feature #308902, revision 36
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Done
Priority
Requester: Mandatory
Requested by: David Alston (dalston)
Product Manager: (Novell)
Product Manager: (Novell)
Project Manager: (Novell)
Engineering Manager: (Novell)
Engineering Manager: (Novell)
Developer: (Novell)
Technical Contact: (Novell)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the SSSD package (
http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
) for local user/password sync with either LDAP or Kerberos for offline
authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Jiří Suchomel (jsuchome)
Feature #308902, revision 38
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Done
Priority
Requester: Mandatory
Requested by: David Alston (dalston)
Product Manager: (Novell)
Product Manager: (Novell)
Project Manager: (Novell)
Engineering Manager: (Novell)
Engineering Manager: (Novell)
Developer: (Novell)
Technical Contact: (Novell)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the SSSD package (
http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
) for local user/password sync with either LDAP or Kerberos for offline
authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Ralf Haferkamp (rhafer)
Feature #308902, revision 39
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Done
Priority
Requester: Mandatory
Requested by: David Alston (dalston)
Product Manager: (Novell)
Product Manager: (Novell)
Project Manager: (Novell)
Engineering Manager: (Novell)
Engineering Manager: (Novell)
Developer: (Novell)
Technical Contact: (Novell)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the SSSD package (
http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
) for local user/password sync with either LDAP or Kerberos for offline
authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Stefan Behlert (sbehlert)
Feature #308902, revision 40
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Done
Priority
Requester: Mandatory
Requested by: David Alston (dalston)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the SSSD package (
http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
) for local user/password sync with either LDAP or Kerberos for offline
authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Ihno Krumreich (ihno)
Feature #308902, revision 41
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Done
Priority
Requester: Mandatory
Requested by: David Alston (dalston)
Product Manager: Federico Lucifredi (flucifredi)
Partner organization: openSUSE.org
Description:
- It would be great if we could configure the SSSD package (
- http://fedoraproject.org/wiki/Features/SSSD (http://fedoraproject.org/wiki/Features/SSSD)
- ) for local user/password sync with either LDAP or Kerberos for offline
- authentication with Yast.
+ It would be great if we could configure the System Security Services
+ Daemon (SSSD) package ( http://fedoraproject.org/wiki/Features/SSSD
+ (http://fedoraproject.org/wiki/Features/SSSD) ) for local user/password
+ sync with either LDAP or Kerberos for offline authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Duncan Mac-Vicar (dmacvicar)
Feature #308902, revision 43
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Done
Priority
Requester: Mandatory
Requested by: David Alston (dalston)
Product Manager: Federico Lucifredi (flucifredi)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the System Security Services
Daemon (SSSD) package ( http://fedoraproject.org/wiki/Features/SSSD
(http://fedoraproject.org/wiki/Features/SSSD) ) for local user/password
sync with either LDAP or Kerberos for offline authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Antoine Ginies (aginies)
Feature #308902, revision 45
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Done
Priority
Requester: Mandatory
Requested by: David Alston (dalston)
Product Manager: Federico Lucifredi (flucifredi)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the System Security Services
Daemon (SSSD) package ( http://fedoraproject.org/wiki/Features/SSSD
(http://fedoraproject.org/wiki/Features/SSSD) ) for local user/password
sync with either LDAP or Kerberos for offline authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Karl Eichwalder (keichwa)
Feature #308902, revision 49
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Done
Priority
Requester: Mandatory
Requested by: David Alston (dalston)
Product Manager: Federico Lucifredi (flucifredi)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the System Security Services
Daemon (SSSD) package ( http://fedoraproject.org/wiki/Features/SSSD
(http://fedoraproject.org/wiki/Features/SSSD) ) for local user/password
sync with either LDAP or Kerberos for offline authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
Feature changed by: Antoine Ginies (aginies)
Feature #308902, revision 50
Title: Configure SSSD via Yast
openSUSE-11.3: Rejected by Andreas Jaeger (a_jaeger)
reject date: 2010-07-20 09:29:40
reject reason: not done in time.
Priority
Requester: Important
openSUSE-11.4: Done
Priority
Requester: Mandatory
Requested by: David Alston (dalston)
Product Manager: Federico Lucifredi (flucifredi)
Partner organization: openSUSE.org
Description:
It would be great if we could configure the System Security Services
Daemon (SSSD) package ( http://fedoraproject.org/wiki/Features/SSSD
(http://fedoraproject.org/wiki/Features/SSSD) ) for local user/password
sync with either LDAP or Kerberos for offline authentication with Yast.
This is related to https://features.opensuse.org/308900 (../308900)
This is important if openSUSE is interested in being a significant
presence in Enterprise environments.
SSSD configuration
sssd's main config file is /etc/sssd/sssd.conf. It is in .ini Format
and documented in the sssd.conf(5) man page. It made up of the multiple
sections.
[sssd] section: The "domains" setting should be un-commented and set to
the special domain "default" for now. The "services" setting should
have the value "nss, pam". Everything else can be left untouched here
for now.
The "[nss]" and "[pam]" sections can be taken as shipped in the
package. Make sure that "filter_groups" and "filter_users" in the
"[nss]" section contains "root".
The rest of the settings are done in the "[domain/default]" section
(create one if it does not exist yet). For a plain LDAP setup the
section should have the following settings:
ldap_uri =
participants (1)
-
fate_noreply@suse.de