>>> > On Jul 27, 2022, at 8:44 AM, Ricardo Wurmus <rek...@elephly.net> wrote: >>> > >>> > Hi Christopher, >>> > >>> >> Turns out we are using SSSD not NCSD on our Linux systems. It seems to >>> >> be working fine: >>> > >>> > You will need to run NSCD if you want Guix software to be able to talk >>> > to the system’s SSSD. The reason is that SSSD works by having >>> > applications load a library whereas NSCD implements a network protocol. >>> > Software built with Guix cannot load the system libary due to ABI >>> > conflict, but it *can* talk to NSCD over the network. >>> > >>> > The system NSCD talks to the system SSSD, so there’s no problem there. >>> > >>> > -- >>> > Ricardo >> >> On Wed, Jul 27, 2022 at 12:51 PM Christopher Batten <cbat...@cornell.edu> >> wrote: >> >> Hmmm ... this made me think that running both was not a great idea? >> >> https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/system-level_authentication_guide/usingnscd-sssd >> >> But I am not an expert on any of this :) I guess the key is to just make >> sure you only enable caching for hosts in /etc/nscd.conf? >> >> Best, >> Chris > > On Jul 28, 2022, at 9:14 PM, Chris Marusich <cmmarus...@gmail.com> wrote: > > FYI: https://lists.gnu.org/archive/html/guix-devel/2022-02/msg00263.html
Thanks for everyone's help! I think I understand now: the key is if we want to use guix, then we really do want to run NSCD and SSSD on these RHEL/CentOS systems if at all possible. So I think we just now need to follow the instructions here? https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/system-level_authentication_guide/usingnscd-sssd Or do you recommend a different way to run NSCD and SSSD at the same time on RHEL/CentOS systems? Once we figure this out maybe we should add a note about this in the Guix docs here: https://guix.gnu.org/manual/en/html_node/Application-Setup.html Especially if Fedora is intending to remove NSCD? Thanks! Chris
