Define 'large'? 

In general many NAS, SAN and even Network vendors have issues with LDAP trees and attributes any way. 

So UID, GID and UPN (user@domain) and NT/Dom SID enumeration and mapping is a secondary issue. 

I.e., I spend a lot more time dealing with maintaining a 'light' 389/RHDS or AD-LDS tree just for those Storage/Network devices than anything else. This is the biggest issue with AD and a lot of attributed and added schema. 

There shouldn't be any issue with SSSD scaling to tens of thousands of records, and it's more of an issue of how the Storage/Network devices use or even search the LDAP attributes across a lot of records. 


--
Sent from my phone, apologies for any brevity as well as autocorrect
Bryan J Smith - http://linkedin.com/in/bjsmith

On Mon, May 9, 2022, 09:44 Spike White <spikewhitetx@gmail.com> wrote:
Ed,

I'm a Linux engineer, reading and learning on this sssd mailing list.  I had just never seen a large company that used that algorithm that's all.  

Spike

On Mon, May 9, 2022 at 2:21 AM <mythmail@runbox.com> wrote:
Hey Spike,

I'm curious, why is it you previously said that SSSD based ID mapping is only used at small scale?

I understand that it's not using a single source of truth (the directory) to provide UID and GID values, but the algorithm is so consistent. I ran a test across all our systems in one network today and I couldn't find any UIDs which didn't match. We've even got different versions of SSSD (different RHEL and Ubuntu releases).


Thanks!
Ed
_______________________________________________
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
_______________________________________________
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure