Ed,

When you say "uses the SSSD ID mapping algorithm to calculate UID and GID", do you mean that algorithm that formulaically calculates the user's UID off the Windows SID?

We are a large company (~25 - 27k sssd clients), but we use the RFC 2307bis schema extension from Microsoft.  Beaucoup NAS vendors support this, because they can do LDAP authentication and set their desired LDAP filters to pull the correct AD object attribute.

I thought that other SSSD algorithm is mainly used in smaller shops.  Where they didn't want to extend the AD schema.

Spike

On Thu, Apr 28, 2022 at 9:39 PM <mythmail@runbox.com> wrote:
Hello,

I work in an enterprise environment which has both Linux and Windows systems and an Active Directory for identity.

For good reasons we need to move from Linux based file servers to a NAS. The problem is that all our Linux systems use the SSD ID mapping algorithm to calculate UID and GIDs (and it works great!). We've not found a commercial NAS vendor who supports this algorithm so we can't just drop their products in place.

Do you know of any who do please?

Surely there must be some as many NASs run on Linux and BSD and use open source software heavily.

My colleague asked this in a GitHub issue [1] but I thought that it might be best to ask here.

Thanks in advance!
Ed.


[1]: https://github.com/SSSD/sssd/issues/6126
_______________________________________________
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure