Hi,
On Fri, 28 Dec 2018, 74cmonty via FreeIPA-users wrote:
could you please explain the difference of FreeIPA UID vs. Linux UID?
When I create a user in FreeIPA the UID is this: 1227200001 But in any
Linux the first user created has UID: 1000
Should I align UIDs in FreeIPA to the Linux UID? If yes, does the same
apply to GID?
Or should I keep the UID / GID created by FreeIPA? If yes, how does this
work when a client is registered with FreeIPA?
a FreeIPA system has it's own (configurable) ID range. These IDs are known
IPA-wide (on every IPA client or server machine) and are intentionally
different from local Linux user IDs that are only known on the machine you
created the corresponding user on. You can use a mix of both local and IPA
users on a particular IPA machine.
The magic (IPA users known on all IPA client or server machines) is
achieved with the System Security Services Daemon (sssd) that is required
to run on every IPAfied machine.
To answer your questions: No, you most likely don't want to align FreeIPA
and local UIDs/GIDs (probably not even possible). If you want a user to be
local, create the user on the particular machine ("useradd"), otherwise
create the user in IPA via the Web UI or via the corresponding IPA CLI
tools ("ipa user-add"; you'll need to get a Kerberos ticket with
"kinit"
before you can use the CLI tools).
You may want to read
https://www.freeipa.org/page/Documentation
for further information.
Mit freundlichen Gruessen/With best regards,
--Daniel.