[SSSD-users] max_id no longer working

[Franky Van Liedekerke]

​Hi,



 



we saw a lot of queries for uidnumber=4294967295  in our ldap backend
logs (from sssd), so we did as suggested by 



https://access.redhat.com/solutions/2963401



 



and added max_id=4294967294 in our sssd domain config.



But this seems to be ignored (at least in version
1.15.2-50.el7_4.8.x86_64), as the queries continue to arrive in ldap.



Adding ldap_max_id with the same value resulted in an "numerical out
of range" error and sssd refuses to start then (seems to be 16-bit
...).



 



And of course I read the nfsnobody discussions where the uid=65534 :-)



As a workaround, I added an entry in /etc/passwd for uid
4294967295 so the problem went away, but this still leaves the max_id
and ldap_max_id issues that should be working fine ...



Any hints?



 



Franky