[SSSD-users] Re: ldap slices in sssd.conf

[Sumit Bose]

On Fri, Aug 24, 2018 at 02:45:57PM +0200, Chris Kowalczyk wrote:
> Hello All,
>
> I have a question regarding ldap slices defined in sssd configuration.
>
> Is it fine to have just one group defined by ldap_idmap_range_min,
> ldap_idmap_range_max and ldap_idmap_range_size parameters? So, something
> like:
>
> ldap_idmap_range_min = 200000
> ldap_idmap_range_max = 3000200000
> ldap_idmap_range_size = 3000000000
>
> Would it be a correct configuration, providing there is only one domain?

This should work. You might want to set 'ldap_idmap_helper_table_size =
0' as well for newer versions of SSSD.
> Also, what are the requirements for max_id, etc parameters? I found that
> max_id should be bigger than  ldap_idmap_range_max etc, but are there
> any limits for it or any other restrictions (max value etc)?

Not that I'm aware of.

bye,
Sumit
> Regards,
> Chris Kowalczyk
>
> sssd-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/[e-mail]....