[SSSD] question on private groups with AD domain

Jakub Hrozek jhrozek at redhat.com
Tue Jun 25 08:37:56 UTC 2013


On Mon, Jun 24, 2013 at 11:32:46PM +0000, Greg.Lehmann at csiro.au wrote:
> Hi All,
>                 Red Hat tend to configure users by default with uid=gid when a user is created. This means there is a corresponding private group with the same name as the user. It is not possible to do this in AD without a bit of trickery. Is there any way to configure sssd so it tries to map the gid through the user uid-name mapping if no match is found on the gid to group name mapping? If not can I request this feature be added please?
> 
> TIA,

Hi Greg,
This RFE is being tracked in https://fedorahosted.org/sssd/ticket/1872

There is also some workaround mentioned in the ticket. Alternatively,
you can check out the "override_gid" option in the sssd.conf man page.



More information about the sssd-devel mailing list