Hi,

I've sssd running with ldap provider and therefore use a binding account.

In general everything works. I've a question regarding the primary group.

When I login with any user who I permitted to in the sssd.conf all users have the Domain Users gorup as primary group.

So if I create a file with User a ownership is UserA:Domain\ Users
Same goes for UserB etc.

Can I have influence on the primary group of the sssd users? Because this seems quite insecure for me. Because I use different permissions for different users (configured via sudoers files). But if every user is in the same group..

Thanks for your input!

Jannis