On Thu, Apr 28, 2022 at 10:39 PM <mythmail(a)runbox.com> wrote:
For good reasons we need to move from Linux based file servers to a
NAS. The problem is that all our Linux systems use the SSD ID
mapping algorithm to calculate UID and GIDs (and it works
great!). We've not found a commercial NAS vendor who supports this
algorithm so we can't just drop their products in place.
We use a NetApp device, and although we have asked NetApp to implement
the sssd algorithm as a way to map the SIDs of AD users/groups to Unix
uids/gids, and they have said they will eventually do so, they have
not given us a timeframe for implementation.
But NetApp can synchronize its passwd/group files via an external URL.
So what we did instead was to set up a web server that serves passwd
and group files for the NetApp.
To generate the files, I wrote a utility called genent that reads AD
LDIF data and synthesizes passwd(5) and group(5) files the same as
sssd does, but only needs one call to getgrnam(3) to do so:
https://github.com/qralston/genent
If you find it useful, I welcome and encourage feedback…