UID < 1000 Configurable?

[Lesley Kimmel]

I was just playing with the sssd local provider and attempting to create a user like 'sss_useradd -u 999 <username>' and I get the error 'The selected UID is outside the allowed range'. Setting UID_MIN in sssd.conf and/or login.defs does not seem to help. Is this a hard-coded limitation?

[Lukas Slebodnik]

On (26/11/16 13:12), [e-mail] wrote:
> I was just playing with the sssd local provider and attempting to create a user like 'sss_useradd -u 999 <username>' and I get the error 'The selected UID is outside the allowed range'. Setting UID_MIN in sssd.conf and/or login.defs does not seem to help. Is this a hard-coded limitation?

sssd.conf is case sensitive and does not have the option
UID_MIN. You need to configure min_id, max_id in LOCAL domain
and restart sssd. The default for local provider is not ducumented
in sssd.conf but it is 1000 for min_id.

LS

[Lesley Kimmel]

Thanks for that reply. What you suggested worked. I think I didn't actually try that. I know I said I tried "UID_MIN" in sssd.conf but that's only because I forgot what the actual parameter was. I had looked at the man page for sssd.conf and saw 'min_id' like you suggested. However, it says that that parameter applies to all domains (not just local) and it has a default value of '1'. Because of that I assumed that it was not the issue. However, maybe the LOCAL domain is a special case and has a different (as you said 1000) default value for 'min_id'.