On Mon, May 09, 2016 at 02:01:51PM -0000, Pierre Aho wrote:

Hi,

Using legacy daemon "nslcd" with "aliases: files ldap" switch in nsswitch.conf I can list all aliases from our ldap backend using "getent -s ldap aliases". If I switch to sssd and trying "aliases: files sss" in nsswitch.conf, "getent -s sss aliases" query is empty.

also note that in our environment "nslcd.conf" had to be tweaked using these entries for "getent aliases" to work: filter aliases (objectClass=mailRecipient) map aliases rfc822MailMember mail

I wonder if sssd support caching aliases database like nslcd does?

• If it does, how can I configure sssd to filter and map the aliases queries like nslcd.conf above?

No, the aliases map is not supported at the moment..

• If not will it be supported in the future?

..and currently not even planned to be honest. You can file a bug at https://fedorahosted.org/sssd/newticket but since this is (IIRC) the first request to implement the aliases database, patches would be mostly welcome here.