[SSSD] [PATCH] Change default min_id to 1
Petter Reinholdtsen
pere at hungry.com
Wed Jun 9 06:03:32 UTC 2010
[Stephen Gallagher]
> The problem with using UID_MIN is that there are still a lot of (BAD)
> deployments out there that are doing things like setting an admin's
> primary GID to 10 (wheel) in LDAP so that they're admin on all the
> client machines. So even if UID_MIN is 500, we'd still hit filtering
> problems.
This could be avoided by providing a separate limit for groups, which
could be lower than the one for users. Minimum group id could be 1
while minimum user id could be 500.
Happy hacking,
--
Petter Reinholdtsen
More information about the sssd-devel
mailing list