URL: https://github.com/SSSD/sssd/pull/798 Title: #798: ipa: ipa_getkeytab don't call libnss_sss
abbra commented: """ Looks nice to me too. In this environment and execution flow we do not expect to resolve any of non-system users because the only user we would need to care about should be the user under which sssd itself is executed (root, in this case, or non-root system user) which should not be stored in sssd for obvious reasons. Another data point is that a ccache used by the ipa-getkeytab is the one set already by SSSD to a static predefined path so there is no need to resolve any of the modifiers supported by libkrb5. """ See the full comment at https://github.com/SSSD/sssd/pull/798#issuecomment-478682250
_______________________________________________ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
