I have enumerate = False

I will post sssd.conf shortly when I return to the office shortly. 

----- Reply message -----
From: "Jakub Hrozek" <jhrozek@redhat.com>
To: "sssd-devel@lists.fedorahosted.org" <sssd-devel@lists.fedorahosted.org>
Subject: [SSSD] Removing uidNumberfrom SSSD Search Filter
Date: Thu, Nov 13, 2014 9:15 AM

On Thu, Nov 13, 2014 at 03:04:44PM +0000, Nathan Robbins wrote:
> Cool. I found that in the docs : ldap_user_uid_number and ldap_user_gid_number
>
> I set those to an attribute in my LDAP that has a numerical value, however, still in the query sent to my ldap server, it has (&(uidNumber=*)(!(uidNumber=0)) in the query.

Do you have enumerate=true perchance?

Can you paste your sssd.conf ?

>
> Even if I set min_id = 0
>
> This causes my LDAP server to return no results, no matter what I do.  I am ok with mapping to another attribute, but unless I can override the search filter and get rid of that “and” I probably won’t be able to make it work.
>
> Ideas?
>
> On Nov 13, 2014, at 3:43 AM, Jakub Hrozek <jhrozek@redhat.com> wrote:
>
> > On Wed, Nov 12, 2014 at 08:15:49PM +0000, Nathan Robbins wrote:
> >> I would like to try and accomplish a similar result with sssd, mainly in order to get it functioning with samba.  Is is possible for me to set it up such that i build the local user account just like above, and then use sssd *only* for authentication?
> >>
> >> N
> >
> > The released versions of SSSD can only serve POSIX users, that is, users
> > who have an UID and a GID. You can either point SSSD to an attribute
> > that contains the ID or map the ID from a Windows SID.
> >
> > The ID attribute doesn't have to be named uidNumber/gidNumber and with
> > recent enough version you can even use the same LDAP attribute for both.
> > But there has to be either a numerical ID attribute or a Windows SID to
> > derive the ID from.
> > _______________________________________________
> > sssd-devel mailing list
> > sssd-devel@lists.fedorahosted.org
> > https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
>
> _______________________________________________
> sssd-devel mailing list
> sssd-devel@lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
_______________________________________________
sssd-devel mailing list
sssd-devel@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-devel