On Mon, Sep 15, 2025 at 3:07 PM Rust, Frank f.rust@tu-braunschweig.de wrote:
This is a random number of users out of our University ldap. There is no group information other than the "student" information. I have only read access to the ldap (and password auth). Would it be possible to get the group membership from a different server?
Best,Frank
That can be theoretically done but outside SSSD. You can set up your own LDAP as a proxy that can combine university LDAP with another (your own or remote) and point SSSD to that proxy instance.
But it looks like a lot of work for one system. If there is no information in another ldap server and it is just one system to manage I would go with some Ansible automation script that updates sssd.conf (or better configuration snippet in sssd.d).
HTH Tomáš