[SSSD] sssd-ldap equivalent of nss_override_attribute_value ?

Gabriel L. Somlo gsomlo at gmail.com
Fri Dec 17 17:17:15 UTC 2010


Hi,

I'm trying to migrate my ldap authorization setup from nss_ldap to sssd,
and got stuck on finding an sssd.conf-equivalent to the
nss_override_attribute_value statement available in nss_ldap.conf.

I can easily do something like

	ldap_user_uid_number unixUid

instead of

	nss_map_attribute uidNumber unixUid

but can't figure out a way to do the equivalent of

	nss_override_attribute_value gidNumber 100

(the group numbers returned via the unixGid attribute by our ldap
server -- over which I have no control -- are useless).

I realize this *might* not be a devel-related issue (unless it's
currently not possible to accomplish, in which case it's a feature
request :) ) but I couldn't find an sssd-users mailing list anywhere,
and lmgtfy.com wasn't of much help either.

Many thanks in advance for any clues !

--Gabe



More information about the sssd-devel mailing list