[(&(uid=myuser)(objectclass=inetorgperson)(&(uid=*)(!(uid=0))))][ou=people,ou=primary,ou=eid,dc=my,dc=edu].
what does an ldapsearch with objectclass=inetorgperson uid=\* return? and do you also have
a uidnumber attribute?
> On August 12, 2019 at 12:55 AM Jakub Hrozek <jhrozek(a)redhat.com> wrote:
>
>
> On Fri, Aug 09, 2019 at 08:33:43PM -0000, Jane Eason wrote:
> > Our LDAP does not include the POSIX schema, so we made a couple of entries in
sssd.conf to attempt to work around that.
> >
> > Here is our complete (slightly redacted) sssd.conf:
> >
> > [domain/mydomain]
> > id_provider = ldap
> > auth_provider = ldap
> > access_provider = ldap
> > ldap_uri =
ldaps://mydomain.my.edu
> > ldap_search_base = ou=people,ou=primary,ou=eid,dc=my,dc=edu
> > ldap_default_bind_dn = cn=my-proxy,ou=proxies,dc=my,dc=edu
> > ldap_default_authtok = REDACTED
> > ldap_access_filter = uid=*
> > ldap_schema = rfc2307
> > cache_credentials = false
> > ldap_user_object_class = inetorgperson
> > ldap_id_mapping = false
> > ldap_user_uid_number = uid
>
> Are you sure your user ID are stored in the uid attribute? Because in
> the earlier log snippet, sdap_save_user was complaining about missing
> UID:
>
> (Thu Aug 8 16:45:53 2019) [sssd[be[mydomain]]] [sdap_save_user] (0x0020): Cannot
retrieve UID for [myuser@mydomain] in domain [mydomain]
> (Thu Aug 8 16:45:53 2019) [sssd[be[mydomain]]] [sdap_save_user] (0x0020): Failed to
save user [myuser@mydomain]
> _______________________________________________
> sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahoste...