Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enumeration feature has been deprecated in SSSD 2.10.0 #2948

Open
FroggyFlox opened this issue Feb 2, 2025 · 0 comments
Open

Enumeration feature has been deprecated in SSSD 2.10.0 #2948

FroggyFlox opened this issue Feb 2, 2025 · 0 comments

Comments

@FroggyFlox
Copy link
Member

Since SSSD 2.10.0, the enumeration feature has been deprecated and might be removed in future release. The notes (https://sssd.io/release-notes/sssd-2.10.0.html) read:

Support of enumeration feature (i.e. ability to list all users/groups using getent passwd/group without argument) for AD/IPA providers is deprecated and might be removed in further releases. Those who are interested to keep using it awhile should configure its build explicitly using --with-extended-enumeration-support ./configure option.

This change has landed in Factory (and thus Tumbleweed) since Oct 2024 (https://build.opensuse.org/projects/openSUSE:Factory/packages/sssd/files/sssd.changes?expand=1). Leap 15.6 is currently still using SSSD 2.9.3 and does not yet have that change (https://build.opensuse.org/package/show/openSUSE:Leap:15.6/sssd).

As a reminder, enabling enumeration for SSSD (LDAP/AD) is one option surfaced in Rockstor's webUI so we will have to consider removing it (probably after a period of warning for those enabling it). I haven't had time to test how it currently behaves if it is enabled.

Note the definition of enumeration above: ability to list all users/groups using getent passwd/group without argument). It thus seems that we should still be able to use something akin to getent -s sss. Note that we also have InfoPipe (the SSSD DBus responder) to list all users so we may "transition" to using that directly if one enables "enumeration" in Rockstor's webUI.

@FroggyFlox FroggyFlox changed the title Enumeration feature in SSSD has been deprecated in SSSD 2.10.0 Enumeration feature has been deprecated in SSSD 2.10.0 Feb 3, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant