[SSSD-users] Howto to accept users with uidnumber or gidnumber equal to 0 ?

Jakub Hrozek jhrozek at redhat.com
Fri Nov 30 11:54:11 UTC 2012


On Fri, Nov 30, 2012 at 11:06:26AM +0100, Sumit Bose wrote:
> On Fri, Nov 30, 2012 at 10:29:04AM +0100, Christian Claveleira wrote:
> > Hi,
> > 
> > I'm trying to setup sssd (sssd-1.8.0-32) on CentOS release 6.3.
> > We have some users whose uidnumber or gidnumber is equal to 0 in our LDAP.
> > I set min_id to 0 in the domain section but these users are filtered out :
> > 
> > (Thu Nov 29 17:23:02 2012) [sssd[be[LDAP]]] [sdap_save_user] (0x0040): User [root-rdm] filtered out! (id out of range)
> > (Thu Nov 29 17:23:02 2012) [sssd[be[LDAP]]] [sdap_save_user] (0x0040): Failed to save user [root-rdm]
> > (Thu Nov 29 17:23:02 2012) [sssd[be[LDAP]]] [sdap_save_users] (0x0040): Failed to store user 0. Ignoring.
> > 
> > Am I missing something ?
> 
> UIDs and GIDs equal to 0 are always filtered out for security reasons
> independent of the settings of min_id. I think the sssd.conf man page is
> not very clear about this, maybe would should add a paragraph about it.
> 
> HTH

I agree:
https://fedorahosted.org/sssd/ticket/1681


More information about the sssd-users mailing list