[SSSD-users] Avoid (&(objectClass=posixAccount)(uid=*)(uidNumber=*)(gidNumber=*))

Michael Ströder michael at stroeder.com
Sat May 10 19:16:58 UTC 2014


Jakub Hrozek wrote:
> Sorry, but I don't agree. The objectclass is cofigurable in sssd.conf
> and especially in AD deployments it might be quite common to only have
> some users configured with POSIX attributes and not the others. The
> enumeration based on objectclass only would download the whole lot and
> then fail while saving the users..

You could make the whole filter configurable with
(&(objectClass=posixAccount)(uid=*)(uidNumber=*)(gidNumber=*)) being the default.

Ciao, Michael.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2398 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20140510/e08a4742/attachment.p7s>


More information about the sssd-users mailing list