On Wed, Feb 03, 2021 at 08:41:56PM -0000, Friedrich Schäuffelhut wrote:
On 2/3/21 6:18 PM, Friedrich Schäuffelhut wrote:
If I understand correctly moving your IPA range may be problematic since you are actively using the uids.
Moving user ids is not a concern. We are in a transition phase where most users still have a local account and use local uids. We are planning to roll out an os update for our desktops soon and with that we are goint to switch to sssd/LDAP based users.
You should probably be aware that subuid/subgid isn't populated for sssd/ldap accounts, so youll have to manage those manually.
I think there are some plans to get nss to talk to sssd to pull it from a network source, but it isn't implemented.
https://github.com/shadow-maint/shadow/issues/154