[SSSD-users] Howto to accept users with uidnumber or gidnumber equal to 0 ?
Sumit Bose
sbose at redhat.com
Fri Nov 30 10:06:26 UTC 2012
On Fri, Nov 30, 2012 at 10:29:04AM +0100, Christian Claveleira wrote:
> Hi,
>
> I'm trying to setup sssd (sssd-1.8.0-32) on CentOS release 6.3.
> We have some users whose uidnumber or gidnumber is equal to 0 in our LDAP.
> I set min_id to 0 in the domain section but these users are filtered out :
>
> (Thu Nov 29 17:23:02 2012) [sssd[be[LDAP]]] [sdap_save_user] (0x0040): User [root-rdm] filtered out! (id out of range)
> (Thu Nov 29 17:23:02 2012) [sssd[be[LDAP]]] [sdap_save_user] (0x0040): Failed to save user [root-rdm]
> (Thu Nov 29 17:23:02 2012) [sssd[be[LDAP]]] [sdap_save_users] (0x0040): Failed to store user 0. Ignoring.
>
> Am I missing something ?
UIDs and GIDs equal to 0 are always filtered out for security reasons
independent of the settings of min_id. I think the sssd.conf man page is
not very clear about this, maybe would should add a paragraph about it.
HTH
bye,
Sumit
>
>
> --
>
> CC
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users
More information about the sssd-users
mailing list