Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable 'Fleet Commander' 'session_provider' in runtime if server side doesn't have corresponding LDAP schema #7123

Open
alexey-tikhonov opened this issue Jan 10, 2024 · 0 comments

Comments

@alexey-tikhonov
Copy link
Member

This is to avoid unnecessary traffic for a vast majority of sssd-ipa users without touching default value.

See #7119 (comment)

Technically, you can identify this feature by presence of its LDAP schema. This is something easily discoverable but would require storing something in a domain struct, probably. https://github.com/abbra/freeipa-desktop-profile/blob/master/plugin/schema.d/75-deskprofile.ldif
I am worried about existing deployments. These tend to be not a single PC style ones, so updating deployed systems is a bit hard.
Changing the code to only query whether the scheme is present at domain online check would achieve pretty much the same but would reduce LDAP traffic as you wanted.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants