[SSSD-users] Re: ldap slices in sssd.conf
On Fri, Aug 24, 2018 at 02:45:57PM +0200, Chris Kowalczyk wrote:
Hello All,
I have a question regarding ldap slices defined in sssd configuration.
Is it fine to have just one group defined by ldap_idmap_range_min,
ldap_idmap_range_max and ldap_idmap_range_size parameters? So, something
like:
ldap_idmap_range_min = 200000
ldap_idmap_range_max = 3000200000
ldap_idmap_range_size = 3000000000
Would it be a correct configuration, providing there is only one domain?
This should work. You might want to set 'ldap_idmap_helper_table_size =
0' as well for newer versions of SSSD.
Also, what are the requirements for max_id, etc parameters? I found that
max_id should be bigger than ldap_idmap_range_max etc, but are there
any limits for it or any other restrictions (max value etc)?
Not that I'm aware of.
bye,
Sumit
>
> Regards,
> Chris Kowalczyk
>
>
> _______________________________________________
> sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
https://lists.fedoraproject.org/archives/list/sssd-users@lists.fedorahost...