On Wed, Dec 18, 2013 at 04:49:51PM -0500, Jason Voorhees wrote:
Hi Jason,
>
> I think we need a little more information. Can you post a result of an
> ldapsearch of a sample user (feel free to rename and obfuscate the
> entry).
>
Thanks, that's a good idea. The contents of an example entry are here:
http://pastebin.com/5GqLj3pt
Thanks, that's very helpful.
> In general, the posixAccount objectclass is not a hard requirement, but
> at present, the users must either have a unique numeric ID or have a
> windows SID to map the ID from.
>
As you can see, the 'uid' attribute has a alpha-numeric value. Could
this be an issue?
Unfortunately, yes, that's an issue.
The user ID must be a 32bit unsigned integer on a POSIX system. I don't
see any attribute with the user entry that could be (ab)used as a user
ID, sorry. I'm afraid one would need to be added on the LDAP side..