[SSSD] Separate minimum uid and gid filter?

Stephen Gallagher sgallagh at redhat.com
Thu May 20 14:28:25 UTC 2010


On 05/20/2010 10:19 AM, Petter Reinholdtsen wrote:
>
> [Stephen Gallagher]
>> No, this is not possible.
>
> Very sad to hear this.
>
>> Using network users and groups with IDs less than 1000 is a very bad
>> idea, because they can conflict with system accounts on the client.
>
> I am well aware of the consequences, but those are irrelevant for this
> use case.  Our 20 year old user and group directory have groups and
> users) in NIS and LDAP with gid<  1000, and we will just have to cope
> with it.  If sssd can't provide what we want, we always can fall back
> to to nscd and libpam-ccreds in concert with ldap or kerberos
> authentication.
>
> Happy hacking,


Well, as stated elsewhere, you can always just reduce the min_id to 1.
If you have any user conflicts, they can be filtered out with 
filter_users and/or filter_groups.


-- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/



More information about the sssd-devel mailing list