Hi list,
Question: Can SSSD provide its services for containerized apps? Is there any howto around?
Thanks, Ondrej
-----
The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited (S3 Group). Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18.
On (11/05/16 14:03), Ondrej Valousek wrote:
Hi list,
Question: Can SSSD provide its services for containerized apps?
Yes, it can
Is there any howto around?
http://www.projectatomic.io/blog/2015/12/fedora-atomic-sssd-container/
LS
On Wed, May 11, 2016 at 02:03:49PM +0000, Ondrej Valousek wrote:
Question: Can SSSD provide its services for containerized apps? Is there any howto around?
In general, having sssd-client package in the container and bind mounting /var/lib/sss from the host into the container should be a good start.
What services in particular do you have in mind for your use case -- NSS, PAM, ... ?
I did not think of bind mounts and sssd-client. Interesting idea. Is it proven to work? I basically need to have NSS and maybe even automounter, but not sure if autofs works inside the container.
Ondrej
-----Original Message----- From: Jan Pazdziora [mailto:jpazdziora@redhat.com] Sent: Wednesday, May 11, 2016 4:11 PM To: End-user discussions about the System Security Services Daemon sssd-users@lists.fedorahosted.org Subject: [SSSD-users] Re: SSSD and docker
On Wed, May 11, 2016 at 02:03:49PM +0000, Ondrej Valousek wrote:
Question: Can SSSD provide its services for containerized apps? Is there any howto around?
In general, having sssd-client package in the container and bind mounting /var/lib/sss from the host into the container should be a good start.
What services in particular do you have in mind for your use case -- NSS, PAM, ... ?
-- Jan Pazdziora Senior Principal Software Engineer, Identity Management Engineering, Red Hat _______________________________________________ sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahosted.org
-----
The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited (S3 Group). Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18.
On (11/05/16 14:29), Ondrej Valousek wrote:
I did not think of bind mounts and sssd-client. Interesting idea. Is it proven to work?
You cannot bind mount sssd-client. The package should be already installed in client container. The fedora base images already contains sssd-client.
You just need to bind mount unix sockets which are used for communication between sssd-client and sssd daemon.
You can optionaly bind mount memory cache. (It can be done read-only)
docker run -ti --rm \ --volume=/var/lib/sss/pipes/:/var/lib/sss/pipes/:rw \ --volume=/var/lib/sss/mc/:/var/lib/sss/mc/:ro \ fedora:23 getent passwd ldap_user
I basically need to have NSS and maybe even automounter, but not sure if autofs works inside the container.
NSS will work with previous example.(tested)
You will need to install "libsss_autofs" into client container and "automount -m" should return maps provided by sssd (not tested)
LS
sssd-users@lists.fedorahosted.org
-
Jan Pazdziora -
Lukas Slebodnik -
Ondrej Valousek