[Freeipa-users] Some clarifications about IPA and SSSD

[Daniel Qarras]

Hi!

Thanks a lot for your clarifications Dmitri, much appreciated! There was one detail in your message which raised my eyebrows and it would be great if you could elaborate a bit more on it.

> What is relation between NSS_LDAP and SSSD?
> 
> Nss_ldap is known to have performance and scalability issues. SSSD
> addresses these issues by creating a robust caching mechanism. However
> SSSD can't replace NSS_LDAP everywhere right away. It is unrealistic.
> This is one of the reasons why nss_ldap issues are still being
> addressed. It might appear that the two hands do not know what the
> other is doing. They actually do and we intentionally clean the
> old solution - nss_ldap , providing nss_ldapd for better performance
> and scalability, and build a new one - SSSD that will eventually
> replace the nss_ldap in a long run.

In poetry it is admirable when one can invent a new phrase to mean the same thing that has been discussed earlier but in technical conversions one usually prefers using the same term over and over and over again :)

So when you mention NSS_LDAP, Nss_ldap, nss_ldap, and nss_ldapd I'm wondering are you speaking only about nss_ldap (1) or do you also refer to nss-ldapd (2)? Especially if the latter, it would be very interesting if you could provide even a hint about envisioned schedule - what's happening with F11/F12, RHEL5.x, and with RHEL6?

1) http://www.padl.com/OSS/nss_ldap.html
2) http://arthurdejong.org/nss-ldapd/

Thanks!