Home_greyopenFATE - openSUSE feature tracking > #313142
Dashboard | Search | Sign up | Login

Please login or register to be able to edit or vote this feature.

YaST support only SSSD for LDAP based authentication

Feature state

openSUSE Distribution
Done

Description

We should remove support for nss_ldap and pam_ldap configuration from the YaST ldap-client module (note: this is not a request to remove nss_ldap and pam_ldap from the distribution) and only support SSSD for LDAP based users authentication.
The nss_ldap and pam_ldap packages should still be part of future distribution to still allow manual setup.

When updating an nss-/pam_ldap based system from an older release it should stay with nss-/pam_ldap. Upon first startup of yast2-ldap-client it might offer a migration to sssd.

User benefit:

Focussing on a single implementation for LDAP authentication allows us to provide a cleaner UI and should reduce the complexity of the YaST ldap-client module considerably. Making it easier to use and maintain.

Discussion


icons/user_comment.png J. S. wrote: (6 years ago)

Joe, Matthias, this is in fact about removing existing functionality. How comon are the non-SSSD set-ups?

icons/user_comment.png J. E. wrote: (6 years ago)

They can be migrated.

icons/user_comment.png L. O. wrote: (4 years ago)

Jiri, please, go ahead and implement this feature.

icons/user_comment.png J. S. wrote: (4 years ago)

Well, current yast2-ldap-client offers UI only for SSSD. If nss is detected, it will be rewritten to SSSD on exit.

So I think this is what was requested. Ralf, could you confirm? Than we could close the feature.

icons/user_comment.png R. H. wrote: (4 years ago)

Yes. This can be closed as done already.

Last change: 4 years ago
Voting
Score: 2
  • Negative: 1
  • Neutral: 0
  • Positive: 3
Tags
Feature Export
Application-xmlXML   Text-x-logPlaintext   PrinterPrint