#1141 RFE: Add PAM option to allow to skip initgroups completely
Closed: wontfix 4 years ago by pbrezina. Opened 12 years ago by simo.

In some cases sssd_pam may be used exclusively to perform authentication for services (ex: web service) that do not care at all about system users.
In those case it may be sensible to allow the admin to indicate, via a pam option in the specific pam service file that no other operation but basic user lookup (only if the user is unknown) and auth is desired.
Skipping initgroups() and forced id updates would improve auth performance for those services.


Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.9.x Infopipe

Fields changed

rhbz: => 0

Cleaning the infopipe milestone; moving this ticket to deferred.

changelog: =>
design: =>
design_review: => 0
feature_milestone: =>
fedora_test_page: =>
mark: => 0
milestone: SSSD Infopipe Feature => SSSD Deferred
review: => 0
selected: =>
sensitive: => 0

Metadata Update from @simo:
- Issue set to the milestone: SSSD Patches welcome

7 years ago

Thank you for taking time to submit this request for SSSD. Unfortunately this issue was not given priority and the team lacks the capacity to work on it at this time.

Given that we are unable to fulfill this request I am closing the issue as wontfix.

If the issue still persist on recent SSSD you can request re-consideration of this decision by reopening this issue. Please provide additional technical details about its importance to you.

Thank you for understanding.

Metadata Update from @pbrezina:
- Issue close_status updated to: wontfix
- Issue status updated to: Closed (was: Open)

4 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/2183

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata