#2828 Add an option to disable checking for trusted domains in the subdomains provider
Closed: Fixed None Opened 3 years ago by jhrozek.

At the moment, the subdomains provider checks for both master domain and trusted domains. However, in many environments the trusted domains can't be contacted due to firewall restrictions, so admins disable the whole subdomains provider. But that has the nasty effect of having to configure the master domain SID manually.

We should instead provide a way to configure sssd so that only the master domain is checked.


Since we have changed failover to only disable unreachable domains, I don't think this is needed so much and 1.15 would be fine

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.15 beta

Fields changed

owner: somebody => pcech

Fields changed

milestone: SSSD 1.15 beta => NEEDS_TRIAGE

More and more users are complaining about this bug, so Petr will work on implementing it.

For now, let's put the ticket into 1.14 and we can decide on puthing the patch to the stable branch when we see the scope.

milestone: NEEDS_TRIAGE => SSSD 1.14 alpha

Fields changed

status: new => assigned

Fields changed

owner: pcech => jhrozek
patch: 0 => 1
status: assigned => new

Patch is sent to the list.
Tests will be added after the data provider refactor.

The patches are on review, but I would like to release 1.14 alpha today, therefore moving to 1.14 beta.

milestone: SSSD 1.14 alpha => SSSD 1.14 beta

The patches still need review.

milestone: SSSD 1.14 beta => SSSD 1.14.0

Fields changed

owner: jhrozek => pcech

A bit more work is needed on this patch.

milestone: SSSD 1.14.0 => SSSD 1.14.1

Fields changed

status: new => assigned

resolution: => fixed
status: assigned => closed

Metadata Update from @jhrozek:
- Issue assigned to pcech
- Issue set to the milestone: SSSD 1.14.1

2 years ago

Login to comment on this ticket.

Metadata