[SSSD-users] Howto to accept users with uidnumber or gidnumber equal to 0 ?

Simo Sorce simo at redhat.com
Fri Nov 30 13:27:17 UTC 2012


On Fri, 2012-11-30 at 10:29 +0100, Christian Claveleira wrote:
> Hi,
> 
> I'm trying to setup sssd (sssd-1.8.0-32) on CentOS release 6.3.
> We have some users whose uidnumber or gidnumber is equal to 0 in our LDAP.
> I set min_id to 0 in the domain section but these users are filtered out :
> 
> (Thu Nov 29 17:23:02 2012) [sssd[be[LDAP]]] [sdap_save_user] (0x0040): User [root-rdm] filtered out! (id out of range)
> (Thu Nov 29 17:23:02 2012) [sssd[be[LDAP]]] [sdap_save_user] (0x0040): Failed to save user [root-rdm]
> (Thu Nov 29 17:23:02 2012) [sssd[be[LDAP]]] [sdap_save_users] (0x0040): Failed to store user 0. Ignoring.
> 
> Am I missing something ?

Sorry Christian, the minimum uid or gid number SSSD can handle is 1,
this is structural and the value 0 internally is used to indicate the
uidnumber is invalid, so it is not possible to change it at this moment.
This was done on purpose as we do not want to allow to serve 'root' out
of SSSD.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York



More information about the sssd-users mailing list