[SSSD] [PATCH] Change default min_id to 1

Petter Reinholdtsen pere at hungry.com
Wed Jun 9 06:03:32 UTC 2010


[Stephen Gallagher]
> The problem with using UID_MIN is that there are still a lot of (BAD) 
> deployments out there that are doing things like setting an admin's 
> primary GID to 10 (wheel) in LDAP so that they're admin on all the 
> client machines. So even if UID_MIN is 500, we'd still hit filtering 
> problems.

This could be avoided by providing a separate limit for groups, which
could be lower than the one for users.  Minimum group id could be 1
while minimum user id could be 500.

Happy hacking,
-- 
Petter Reinholdtsen




More information about the sssd-devel mailing list