[Freeipa-users] SSSD vs NSCD

[Daniel Qarras]

Hi,

I googled a bit and got impression that on IPA clients SSSD should completely replace nscd, is this correct? If so, will it provide ~1:1 functionality, too, or, if not, what are the main differences? Are there cases where one should run both SSSD and nscd or even nscd only?

Unfortunately with nscd it seems that it cannot correctly handle the case where a user roams with a laptop unconnected to a LDAP/AD server [1] forcing adding entries to /etc/passwd for proper NSS info (pam_ccreds seem to handle authentication caching ok [2]). I would love to see this issue addressed with SSSD.

1) http://sources.redhat.com/bugzilla/show_bug.cgi?id=10181
2) https://bugzilla.redhat.com/show_bug.cgi?id=478446

Thanks!