Am Thu, Sep 30, 2021 at 03:41:12PM -0000 schrieb Kurt Stine:
I was told this would be a better place than github issues.
We're moving from an ldap environment to an AD environment. This means we have a
large amount of users who are still linked with their original ldap UIDs. Unfortunately,
changing the UIDs to the automatically assigned AD UIDs is not an option. Is there a way
for SSSD to both inherit a UID if it exists or create its own if it doesn't? Also, is
it possible to sync AD groups as well?
Right now we have this:
#ldap_id_mapping = True
ldap_user_uid_number = uidNumber
ldap_user_gid_number = gidNumber
Unfortunately, even removing the last line doesn't sync AD groups. Are there any
options to sync them?
as Alexey said in https://github.com/SSSD/sssd/issues/5800
the override feature for this. You can import multiple overrides at once
with 'sss_override user-import ...' or 'sss_override group-import ...'.
If you are using a configuration management tool like ansible, puppet,
cfengine etc you can distribute a file with the overrides to all
affected systems and all 'sss_override'.
sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure