On Tue, 2012-02-07 at 18:46 +0100, Marco Pizzoli wrote:
Hi, it's me again :-)
Currently I managed to have my ldap server accessed by sssd, but my
users are now discarded because of their UID and GID.
Being this a test system, I had no issues in changing my min_id and
max_id parameters in sssd.conf but I notice that I'm failing in having
them specified uniquely for UID and/or GID. I was hoping to be able to
set something similar to min_uid_id/max_uid_id and
min_gid_id/max_gid_id.
Is this a wanted behaviour?
If yes, please could you explain to me the rationale?
If no, can I submit this as an RFE?
In general, it's best to just not use those options at all unless you're
configuring multiple domains. The real purpose behind it is to be able
to specify that range A comes from one LDAP server and range B comes
from another (and to that end, we intentionally conflated UID and GID
ranges together).
For a single-domain setup, it's much wiser to just omit these two
options entirely.