[SSSD] Removing uidNumberfrom SSSD Search Filter

Jakub Hrozek jhrozek at redhat.com
Thu Nov 13 09:43:25 UTC 2014


On Wed, Nov 12, 2014 at 08:15:49PM +0000, Nathan Robbins wrote:
> I would like to try and accomplish a similar result with sssd, mainly in order to get it functioning with samba.  Is is possible for me to set it up such that i build the local user account just like above, and then use sssd *only* for authentication? 
> 
> N

The released versions of SSSD can only serve POSIX users, that is, users
who have an UID and a GID. You can either point SSSD to an attribute
that contains the ID or map the ID from a Windows SID.

The ID attribute doesn't have to be named uidNumber/gidNumber and with
recent enough version you can even use the same LDAP attribute for both.
But there has to be either a numerical ID attribute or a Windows SID to
derive the ID from.



More information about the sssd-devel mailing list