[Freeipa-users] Postfix IPA

[Simo Sorce]

On Tue, 2012-07-03 at 18:15 +0530, M.R Niranjan wrote:
> 
> On 07/03/2012 11:14 AM, freeipa at noboost.org wrote:
> > Hi All,
> > 
> > Server:
> > ipa-server-2.1.3-9.el6.x86_64
> > sssd-1.5.1-66.el6_2.3
> > 
> > Client:
> > ipa-client-2.1.3-9.el6.x86_64
> > 
> > 
> > I've got Postfix working with IPA and to be honest it was actually
> very
> > easy. I simply setup a standard postfix server, configured the IPA
> > client and when mail was delivered, postfix detected the UID's from
> IPA
> > and delivered the mail. 
> > 
> > So I thought to myself, this is one of the most important services
> we
> > have. What would happen if the SSSD client failed for some reason on
> the
> > postfix server?
> > 
> 
> By sssd client failing do you mean sssd not able to reach ldap servers
> or sssd service crashing ?
> 
> If sssd parent crashes then i think not much you could do but if the
> child services of sssd doesn't respond sssd does restart the child
> services automatically .
> 
> Refer:
> http://freeipa.org/page/Service_Controller_Daemon#Configuration_Store
> 

Also we still keep serving users out of the sssd cache as long as
sssd_nss process is running.
And with the memory cache we have in 1.9.0 you may still get users from
the cache directly even if the whole sssd dies.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York