[SSSD-users] Howto to accept users with uidnumber or gidnumber equal to 0 ?

Sumit Bose sbose at redhat.com
Fri Nov 30 10:06:26 UTC 2012


On Fri, Nov 30, 2012 at 10:29:04AM +0100, Christian Claveleira wrote:
> Hi,
> 
> I'm trying to setup sssd (sssd-1.8.0-32) on CentOS release 6.3.
> We have some users whose uidnumber or gidnumber is equal to 0 in our LDAP.
> I set min_id to 0 in the domain section but these users are filtered out :
> 
> (Thu Nov 29 17:23:02 2012) [sssd[be[LDAP]]] [sdap_save_user] (0x0040): User [root-rdm] filtered out! (id out of range)
> (Thu Nov 29 17:23:02 2012) [sssd[be[LDAP]]] [sdap_save_user] (0x0040): Failed to save user [root-rdm]
> (Thu Nov 29 17:23:02 2012) [sssd[be[LDAP]]] [sdap_save_users] (0x0040): Failed to store user 0. Ignoring.
> 
> Am I missing something ?

UIDs and GIDs equal to 0 are always filtered out for security reasons
independent of the settings of min_id. I think the sssd.conf man page is
not very clear about this, maybe would should add a paragraph about it.

HTH

bye,
Sumit

> 
> 
> -- 
> 
> CC
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users


More information about the sssd-users mailing list