On Fri, Aug 24, 2018 at 02:45:57PM +0200, Chris Kowalczyk wrote:
I have a question regarding ldap slices defined in sssd configuration.
Is it fine to have just one group defined by ldap_idmap_range_min,
ldap_idmap_range_max and ldap_idmap_range_size parameters? So, something
ldap_idmap_range_min = 200000
ldap_idmap_range_max = 3000200000
ldap_idmap_range_size = 3000000000
Would it be a correct configuration, providing there is only one domain?
This should work. You might want to set 'ldap_idmap_helper_table_size =
0' as well for newer versions of SSSD.
Also, what are the requirements for max_id, etc parameters? I found that
max_id should be bigger than ldap_idmap_range_max etc, but are there
any limits for it or any other restrictions (max value etc)?
Not that I'm aware of.
> Chris Kowalczyk
> sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: