​Hi,

 

we saw a lot of queries for uidnumber=4294967295  in our ldap backend logs (from sssd), so we did as suggested by

https://access.redhat.com/solutions/2963401

 

and added max_id=4294967294 in our sssd domain config.

But this seems to be ignored (at least in version 1.15.2-50.el7_4.8.x86_64), as the queries continue to arrive in ldap.

Adding ldap_max_id with the same value resulted in an "numerical out of range" error and sssd refuses to start then (seems to be 16-bit ...).

 

And of course I read the nfsnobody discussions where the uid=65534 :-)

As a workaround, I added an entry in /etc/passwd for uid 4294967295 so the problem went away, but this still leaves the max_id and ldap_max_id issues that should be working fine ...

Any hints?

 

Franky