[Freeipa-users] meaning of several domains in sssd.conf

Jan-Frode Myklebust janfrode at tanso.net
Wed Feb 27 08:47:39 UTC 2013


On Wed, Feb 27, 2013 at 09:31:43AM +0100, Jakub Hrozek wrote:
> 
> Are there any issues you are seeing with IPA's sssd_be? It would
> definitely be better to fix those first rather than attempting a
> workaround like this.

I've earlier been hit by a bug in nested groups (or netgroups) where the
ipa backend would segfault, leaving sssd running but unable to
authenticate. 

I believe it was this problem:

	https://fedorahosted.org/sssd/changeset/db90c1b60c729995f34af2431ede61ea7493e540/

And therefore wonder if it makes sense, or even is advisable to have
backup backends to make sure to never lose the user database.


  -jf




More information about the Freeipa-users mailing list