Features/DisconnectedOperation

From FedoraProject

< Features(Difference between revisions)
Jump to: navigation, search
(Imported from MoinMoin)
 
(Replacing page with '= Disconnected operation = This has been superseded by Features/SSSD. ---- Category:FeaturePageIncomplete')
 
(4 intermediate revisions by 2 users not shown)
Line 1: Line 1:
 
= Disconnected operation =
 
= Disconnected operation =
  
 +
This has been superseded by [[Features/SSSD]].
  
 +
----
  
== Summary ==
+
[[Category:FeaturePageIncomplete]]
 
+
Allow caching of credentials (LDAP, Kerberos etc.) so that disconnected operation is possible and seamless.
+
 
+
== Owner ==
+
* Name: BojanSmojver
+
 
+
== Current status ==
+
* Targeted release: N/A
+
* Last updated: (2008-03-26)
+
* Percentage of completion: 0%
+
 
+
== Detailed Description ==
+
 
+
Anaconda provides no mechanisms to activate cached credentials and network information, neither in the GUI nor in kickstart files. Fedora ships with pam_ccreds and nscd, which are supposed to take care just of that. The pam_ccred module does a good job of caching credentials, but nscd was not designed to cache network information during extended periods of disconnection. As such, even if existing solutions were integrated well, they still leave much room for improvement.
+
 
+
There has been some discussion on the FreeIPA mailing list about solving this problem.
+
 
+
== Benefit to Fedora ==
+
 
+
It's extremely useful for server-based authentication, especially for mobile users. It would allow people that authenticated against LDAP, Kerberos etc. to disconnect their machine from the network and still be able to login or authenticate against GNOME screensaver and similar. It can also be useful if authentication server goes down.
+
 
+
== Scope ==
+
 
+
A comprehensive solution needs to be developed and Anaconda must support configuring it. Authconfig needs to become aware of it too.
+
 
+
== Test Plan ==
+
 
+
1. Configure lots of notebooks out there by hand first and test with Kerberos and LDAP.
+
2. Take best experiences and build them into anaconda/authconfig.
+
 
+
== User Experience ==
+
 
+
1. If configured, users should be able to continue using their system that normally authenticates against a network server as if they had authentication done by local files.
+
 
+
== Dependencies ==
+
 
+
* pam_ccreds and nscd (already there)
+
* required anaconda changes
+
* required authconfig changes
+
* the mysterious FreeIPA's BlueBox?
+
 
+
== Contingency Plan ==
+
* N/A
+
 
+
== Documentation ==
+
* https://bugzilla.redhat.com/show_bug.cgi?id=145044
+
* http://www.flyn.org/laptopldap/laptopldap.html
+
* https://www.redhat.com/archives/freeipa-devel/2008-February/msg00233.html
+
* http://freeipa.org/
+
 
+
== Release Notes ==
+
 
+
----
+
[[Category:ProposedFeature]]
+

Latest revision as of 21:04, 9 February 2009

[edit] Disconnected operation

This has been superseded by Features/SSSD.