[SSSD] Separate minimum uid and gid filter?
Simo Sorce
ssorce at redhat.com
Thu May 20 13:55:03 UTC 2010
On Thu, 20 May 2010 15:09:53 +0200
Petter Reinholdtsen <pere at hungry.com> wrote:
>
> After some struggling, I was finally able to get sssd version 1.0.5
> working here at the university. The problem was not related to SSL
> certificates as I first suspected, but related to some surprising
> uid/gid filtering.
>
> My user have a gid value of 300, and users with this gid are silently
> ignored by sssd. I tried to find some configuration setting to
> configure the minimun gid, but found nothing in the manual page for
> sssd.conf. I did on the other hand find the min_id value. But I
> would really like to keep the uid limit at 1000, while I would like to
> lower the gid limit to 1. Is this possible?
>
> Happy hacking,
Petter,
we did a conscious decision of not splitting these values. I know there
are some corner cases where it would be nice.
But in most cases the need arises from a very bad choice in the
configuration of the ldap server.
For those cases you should just lower the common min_id and live with
that.
Yes we are trying to rise the bar a little here.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
More information about the sssd-devel
mailing list