Hi Team,
We have changed the property enumerate to true in etc/sssd/sssd.conf file. After this change in RStudio-server All LDAP authenticated user were loaded. But it's has impacted the server performance and other user were facing the issues. we wanted to add only 3 LDAP authenticated users in this list. Do we have any other way than changing enumerate property to give access only to 3 users?
Could you please guide us on this.
Thanks, Irfan
Irfan wrote:
We have changed the property enumerate to true in etc/sssd/sssd.conf file.
Why?
But it's has impacted the server performance
As expected.
Do we have any other way than changing enumerate property to give access only to 3 users?
Depending on your LDAP entries you could try to use filters. Search sssd-ldap(5) for "filter": - ldap_access_filter - filter part in ldap_search_base
Ciao, Michael.
Hi Team,
Thanks of prompt response.
we have changed this property to enable project sharing feature in R-Studio server. i want to share to specific user ids like HCI3000,HCI500...
Please suggest.
Thanks, Irfan
On Thu, May 12, 2016 at 1:15 PM, Michael Ströder michael@stroeder.com wrote:
Irfan wrote:
We have changed the property enumerate to true in etc/sssd/sssd.conf
file.
Why?
But it's has impacted the server performance
As expected.
Do we have any other way than changing enumerate property to give
access only to 3 users?
Depending on your LDAP entries you could try to use filters. Search sssd-ldap(5) for "filter":
- ldap_access_filter
- filter part in ldap_search_base
Ciao, Michael.
sssd-users mailing list sssd-users@lists.fedorahosted.org
https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahosted.org
Thanks a ton for your response..will this simple user access works for LDAP authenticated users? To add enumerate=true in SSSD.conf file what are the hardware and software configurations we need..
We have made this change to load LDAP authenticated users in R-Studio server pro..
Thanks in advance..
Regards Irfan On 12-May-2016 7:20 pm, "Striker Leggette" striker@terranforge.com wrote:
You could use the simple access provider..
access_provider = simple simple_allow_users = user1, user2, user3
Striker
On 05/12/2016 05:51 AM, mohammed irfan wrote:
(Do we have any other way than changing enumerate property to give access only to 3 users?) Please suggest.
sssd-users mailing list sssd-users@lists.fedorahosted.org
https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahosted.org
On Thu, May 12, 2016 at 11:09:41PM +0530, mohammed irfan wrote:
Thanks a ton for your response..will this simple user access works for LDAP authenticated users? To add enumerate=true in SSSD.conf file what are the hardware and software configurations we need..
We have made this change to load LDAP authenticated users in R-Studio server pro..
Does R-studio really require the users to be enumerated with setpwent/getpwent/endpwent?
If so, I wonder if you can tune the ldap_user_search_base to also include a filter that only contains the users you want to resolve (untested though, just an idea..)
Hi Jakub,
Yes R-Studio requires user enumeration to load LDAP authenticated users for sharing project feature. http://docs.rstudio.com/ide/server-pro/r-sessions.html#prerequisites.
Please help us with your suggestion and if possible provide specific hardware and software recommendations to add enumerate= true in sssd.conf.
Thanks, Irfan
On Fri, May 13, 2016 at 3:38 AM, Jakub Hrozek jhrozek@redhat.com wrote:
On Thu, May 12, 2016 at 11:09:41PM +0530, mohammed irfan wrote:
Thanks a ton for your response..will this simple user access works for
LDAP
authenticated users? To add enumerate=true in SSSD.conf file what are the hardware and
software
configurations we need..
We have made this change to load LDAP authenticated users in R-Studio server pro..
Does R-studio really require the users to be enumerated with setpwent/getpwent/endpwent?
If so, I wonder if you can tune the ldap_user_search_base to also include a filter that only contains the users you want to resolve (untested though, just an idea..) _______________________________________________ sssd-users mailing list sssd-users@lists.fedorahosted.org
https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahosted.org
Irfan,
Is it possible to provide any information about your LDAP server, such as nested group complexity, number of users, number of groups, etc.?
Striker
On 05/13/2016 02:41 AM, mohammed irfan wrote:
Please help us with your suggestion and if possible provide specific hardware and software recommendations to add enumerate= true in sssd.conf.
Hi Striker,
PFB for our system configuration details:
[image: Inline image 1]
Thanks a ton for your help Thanks, Irfan
On Fri, May 13, 2016 at 6:40 PM, Striker Leggette striker@terranforge.com wrote:
Irfan,
Is it possible to provide any information about your LDAP server, such as nested group complexity, number of users, number of groups, etc.?
Striker
On 05/13/2016 02:41 AM, mohammed irfan wrote:
Please help us with your suggestion and if possible provide specific hardware and software recommendations to add enumerate= true in sssd.conf.
sssd-users mailing list sssd-users@lists.fedorahosted.org
https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahosted.org
On Fri, May 13, 2016 at 12:11:29PM +0530, mohammed irfan wrote:
Hi Jakub,
Yes R-Studio requires user enumeration to load LDAP authenticated users for sharing project feature. http://docs.rstudio.com/ide/server-pro/r-sessions.html#prerequisites.
Ouch, requiring enumeration is simply not going to work for large directories. Have you considered asking them to fix their product?
Please help us with your suggestion and if possible provide specific hardware and software recommendations to add enumerate= true in sssd.conf.
See man sssd.conf, search for ldap_search_base. There is already an example that contains the filter, just change it to match an OR-filter of the users that you want R-Studio to enumerate.
sssd-users@lists.fedorahosted.org
-
Irfan -
Jakub Hrozek -
Michael Ströder -
mohammed irfan -
Striker Leggette