URL:
https://github.com/SSSD/sssd/pull/644
Title: #644: When multiple UIDs exist, use the username provided by the user as the first
lookup
sumit-bose commented:
"""
First, you cannot use global variables. The components of SSSD are designed to handle
multiple requests in parallel, so you have to expect that two or more users are looked up
at the same time.
I wonder if the underlying issue isn't better solved on the server side. With the
ldap_user_name option you can tell SSSD to use a different LDAP attribute than
'uid' for the user name, e.g. for the AD provider we use the AD specific attribute
samAccountName. If there is currently no other attribute which only contains
'itstaff1' and other applications depend on the 'uid' attribute I'd
suggest to add a new attribute like e.g. 'linuxUid' to the schema with otherwise
the same definition as 'uid' expect the OID or use an existing attribute with a
suitable sysntax and matching rules.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/644#issuecomment-418846509