[Freeipa-devel] Disabling Schema Compatibility rule

[Jakub Hrozek]

On Fri, Mar 04, 2016 at 11:10:47AM +0200, Alexander Bokovoy wrote:
> On the other hand, if no users are going to use the configuration, it
> should not hurt anymore to have it enabled. With current slapi-nis state
> there should be no problems anymore.

I admit I haven't been following the slapi-nis patches closely. Are you
saying that if no sssd clients are using the slapi-nis tree (remember we
used the tree mostly for sudo rules lately) the users wouldn't see
issues that they were seeing previously (IIRC it had to do with locking
because every auth, so also every bind was a write operation) ?

Or were these issues fixed in slapi-nis so even using the compat tree
for sudo rules would not be problematic anymore?