[SSSD-users] Howto to accept users with uidnumber or gidnumber equal to 0 ?

Christian Claveleira christian.claveleira at cru.fr
Fri Nov 30 16:56:24 UTC 2012


Simo Sorce a écrit, le 30/11/12 14:27:
> On Fri, 2012-11-30 at 10:29 +0100, Christian Claveleira wrote:
>> Hi,
>>
>> I'm trying to setup sssd (sssd-1.8.0-32) on CentOS release 6.3.
>> We have some users whose uidnumber or gidnumber is equal to 0 in our LDAP.
>> I set min_id to 0 in the domain section but these users are filtered out :
>>
>> (Thu Nov 29 17:23:02 2012) [sssd[be[LDAP]]] [sdap_save_user] (0x0040): User [root-rdm] filtered out! (id out of range)
>> (Thu Nov 29 17:23:02 2012) [sssd[be[LDAP]]] [sdap_save_user] (0x0040): Failed to save user [root-rdm]
>> (Thu Nov 29 17:23:02 2012) [sssd[be[LDAP]]] [sdap_save_users] (0x0040): Failed to store user 0. Ignoring.
>>
>> Am I missing something ?
>
> Sorry Christian, the minimum uid or gid number SSSD can handle is 1,
> this is structural and the value 0 internally is used to indicate the
> uidnumber is invalid, so it is not possible to change it at this moment.
> This was done on purpose as we do not want to allow to serve 'root' out
> of SSSD.
>
> Simo.
>


Ok, so it's a feature, not a bug ;-)

I agree the doc should be more explicit.

-- 

CC


More information about the sssd-users mailing list