Jakub Hrozek wrote:
the sssd's code that fetches sudo rules from the IPA server got an overhaul recently. The search would no longer be performed against the compat tree, but against IPA's native LDAP tree. This would have the advantage that environments that don't use the slapi-nis' compat tree for another reason (like old or non-Linux clients) would no longer require slapi-nis to be running at all.
Frankly I don't understand this text. Especially I don't know what the terms "compat tree" and "IPA's native LDAP tree" really mean.
Does this only affect the IPA provider?
Ciao, Michael.
-- Michael Ströder E-Mail: michael@stroeder.com http://www.stroeder.com