Hi,
I am trying to setup an authentication against Active Directory, with multiple domains, and I haven't been able to find the recommended way to do it (it is very possible I missed it...), so I am looking for explanation and advice.
For now, I have 2 different setups :
[sssd]
config_file_version = 2
debug_level =0
services = nss, pam
enumerate = true
debug_level = 8
id_provider = ad
access_provider = ad
ldap_id_mapping = false
#dyndns_update = false
[sssd]
config_file_version = 2
debug_level =0
services = nss, pam
enumerate = true
debug_level = 9
id_provider = ad
access_provider = ad
ldap_id_mapping = false
enumerate = true
debug_level = 7
id_provider = ad
access_provider = ad
ldap_id_mapping = false
or
as I would do with an ordinary windows workstation.
And for AD, I use the posix attributes (and that may be the way...) so if a UID or GID exists in both domains, I happen to find wrong group names, etc.
I hope my questions are clear enough ! :-) What am I doing wrong ? What are the recommended settings for that situation ?
Thanks,
Jeremy