Hi, it's me again :-) Currently I managed to have my ldap server accessed by sssd, but my users are now discarded because of their UID and GID. Being this a test system, I had no issues in changing my min_id and max_id parameters in sssd.conf but I notice that I'm failing in having them specified uniquely for UID and/or GID. I was hoping to be able to set something similar to min_uid_id/max_uid_id and min_gid_id/max_gid_id.
Is this a wanted behaviour? If yes, please could you explain to me the rationale? If no, can I submit this as an RFE?
Thanks Marco
On Tue, 2012-02-07 at 18:46 +0100, Marco Pizzoli wrote:
Hi, it's me again :-) Currently I managed to have my ldap server accessed by sssd, but my users are now discarded because of their UID and GID. Being this a test system, I had no issues in changing my min_id and max_id parameters in sssd.conf but I notice that I'm failing in having them specified uniquely for UID and/or GID. I was hoping to be able to set something similar to min_uid_id/max_uid_id and min_gid_id/max_gid_id.
Is this a wanted behaviour? If yes, please could you explain to me the rationale? If no, can I submit this as an RFE?
In general, it's best to just not use those options at all unless you're configuring multiple domains. The real purpose behind it is to be able to specify that range A comes from one LDAP server and range B comes from another (and to that end, we intentionally conflated UID and GID ranges together).
For a single-domain setup, it's much wiser to just omit these two options entirely.
sssd-devel@lists.fedorahosted.org