[SSSD-users] Primary group with ldap_id_mapping

Jakub Hrozek jhrozek at redhat.com
Tue Aug 5 18:05:33 UTC 2014


On Mon, Aug 04, 2014 at 09:25:30AM -0700, Jacob Weber wrote:
> If I have ldap_id_mapping turned on, how does SSSD determine a user's primary group? I don't think 
> ldap_user_gid_number is used in this case, since the numeric IDs are determined on the client side.
> 
> Thanks,
> Jacob

Hi,

see the sssd-ad man page, there is a section called 'Mapping Algorithm'
that hopefully answers your question.

For AD users, the GID is typically derived from Domain Users.


More information about the sssd-users mailing list