It would be nice if sssd could work with CTDB ...

[Volker Lendecke]

On Sat, Jan 14, 2017 at 12:34:52PM +1100, Dewayne Geraghty wrote:
> On 14 January 2017 at 06:43, Volker Lendecke <vl at samba.org> wrote:
> 
> > On Fri, Jan 13, 2017 at 10:52:43AM -0800, Richard Sharpe wrote:
> > > So, I am just saying, IYKWIM, it would be really nice.
> >
> > What do you need sssd for that winbind can't help you with?
> >
> > Volker
> >
> >
> winbindd is great, but when you have a lot of services that use SAMBA-AD as
> an authentication/authorisation mechanism it is nice to have a small
> application like sssd or nslcd.  This becomes significant when you have a
> lot of services (mail, squid, ss5, irc, jabber, apache) that require
> authentication/authorisation.

Can sssd do ntlmssp for squid for example?

> For comparison:
> - nslcd has 19 shared libs and one (FreeBSD) dependency
> - winbindd has 122 shared libraries and samba44 has 16 dependencies.

... most of which are just internal libs. Dependency-wise we might be
able to go through and strip that down to what only winbind really
needs. Also, for smbd we have a compilation target that makes it link
statically with all internal libs non-shared. We might be able to do
that for winbind too, if it's not done already.

Volker