-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 12/17/2010 12:17 PM, Gabriel L. Somlo wrote:
Hi,
I'm trying to migrate my ldap authorization setup from nss_ldap to sssd,
and got stuck on finding an sssd.conf-equivalent to the
nss_override_attribute_value statement available in nss_ldap.conf.
I can easily do something like
ldap_user_uid_number unixUid
instead of
nss_map_attribute uidNumber unixUid
but can't figure out a way to do the equivalent of
nss_override_attribute_value gidNumber 100
(the group numbers returned via the unixGid attribute by our ldap
server -- over which I have no control -- are useless).
I realize this *might* not be a devel-related issue (unless it's
currently not possible to accomplish, in which case it's a feature
request :) ) but I couldn't find an sssd-users mailing list anywhere,
and
lmgtfy.com wasn't of much help either.
Many thanks in advance for any clues !
Take a look at sssd-ldap(5) ('man sssd-ldap')
There's a list of attributes you can override.
For example:
ldap_user_uid_number (string)
The LDAP attribute that corresponds to the user´s id.
Default: uidNumber
ldap_user_gid_number (string)
The LDAP attribute that corresponds to the user´s primary
group id.
Default: gidNumber
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora -
http://enigmail.mozdev.org/
iEYEARECAAYFAk0LnW4ACgkQeiVVYja6o6OQcQCeNgJcDpZjlb5dHo7ZnAEqu3uD
EuYAoJOjQB+57R6yTXh1hXvTKRzb9Cu2
=DV+A
-----END PGP SIGNATURE-----