Default Trust View allows to define POSIX attributes for AD users. However, it requires creating individual ID overrides for each user. It would be good instead create a way to define 'ID View defaults' for users. These defaults would have default shell, template for home directory path, and some other attributes that could be the same for all users. It would help to reduce amount of individual overrides just for the purpose of defining shell or home directory globally.
SSSD would need to read these defaults and use them on top of nss provider defaults like it is done right now.
Alexander, AFAIU, this template could be also used for automatically creating ID overrides in LDAP when AD user first authenticates to the FreeIPA Web UI. Correct?
Yes, this could be used for creating ID Overrides if an option for that would be added and a plugin that makes it possible would be written. That would be a next step.
Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1318771 (Red Hat Enterprise Linux 7)
Metadata Update from @abbra: - Issue assigned to someone - Issue set to the milestone: FreeIPA 4.5 backlog
Just found this and would love to see it integrated. Is there currently any traction on it?
Thanks!
No progress was made other than some prototyping. I was unable to get it in before SSSD 2.0. Not sure when it would be considered.
Metadata Update from @abbra: - Issue close_status updated to: None
Metadata Update from @abbra: - Issue set to the milestone: FreeIPA 4.8 (was: FreeIPA 4.5 backlog)
Login to comment on this ticket.