Define 'large'?
In general many NAS, SAN and even Network vendors have issues with LDAP
trees and attributes any way.
So UID, GID and UPN (user@domain) and NT/Dom SID enumeration and mapping is
a secondary issue.
I.e., I spend a lot more time dealing with maintaining a 'light' 389/RHDS
or AD-LDS tree just for those Storage/Network devices than anything else.
This is the biggest issue with AD and a lot of attributed and added schema.
There shouldn't be any issue with SSSD scaling to tens of thousands of
records, and it's more of an issue of how the Storage/Network devices use
or even search the LDAP attributes across a lot of records.
--
Sent from my phone, apologies for any brevity as well as autocorrect
Bryan J Smith -
http://linkedin.com/in/bjsmith
On Mon, May 9, 2022, 09:44 Spike White <spikewhitetx(a)gmail.com> wrote:
Ed,
I'm a Linux engineer, reading and learning on this sssd mailing list. I
had just never seen a large company that used that algorithm that's all.
Spike
On Mon, May 9, 2022 at 2:21 AM <mythmail(a)runbox.com> wrote:
> Hey Spike,
>
> I'm curious, why is it you previously said that SSSD based ID mapping is
> only used at small scale?
>
> I understand that it's not using a single source of truth (the directory)
> to provide UID and GID values, but the algorithm is so consistent. I ran a
> test across all our systems in one network today and I couldn't find any
> UIDs which didn't match. We've even got different versions of SSSD
> (different RHEL and Ubuntu releases).
>
>
> Thanks!
> Ed
> _______________________________________________
> sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct:
>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
>
https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahoste...
> Do not reply to spam on the list, report it:
>
https://pagure.io/fedora-infrastructure
>
_______________________________________________
sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahoste...
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure