[SSSD] Separate minimum uid and gid filter?

Simo Sorce ssorce at redhat.com
Thu May 20 13:55:03 UTC 2010


On Thu, 20 May 2010 15:09:53 +0200
Petter Reinholdtsen <pere at hungry.com> wrote:

> 
> After some struggling, I was finally able to get sssd version 1.0.5
> working here at the university.  The problem was not related to SSL
> certificates as I first suspected, but related to some surprising
> uid/gid filtering.
> 
> My user have a gid value of 300, and users with this gid are silently
> ignored by sssd.  I tried to find some configuration setting to
> configure the minimun gid, but found nothing in the manual page for
> sssd.conf.  I did on the other hand find the min_id value.  But I
> would really like to keep the uid limit at 1000, while I would like to
> lower the gid limit to 1.  Is this possible?
> 
> Happy hacking,

Petter,
we did a conscious decision of not splitting these values. I know there
are some corner cases where it would be nice.
But in most cases the need arises from a very bad choice in the
configuration of the ldap server.
For those cases you should just lower the common min_id and live with
that.
Yes we are trying to rise the bar a little here.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York



More information about the sssd-devel mailing list