On Wed, Feb 03, 2021 at 08:41:56PM -0000, Friedrich Schäuffelhut wrote:
> On 2/3/21 6:18 PM, Friedrich Schäuffelhut wrote:
>
> If I understand correctly moving your IPA range may be problematic
> since you are actively using the uids.
Moving user ids is not a concern. We are in a transition phase where
most users still have a local account and use local uids. We are planning
to roll out an os update for our desktops soon and with that we are goint to
switch to sssd/LDAP based users.
You should probably be aware that subuid/subgid isn't populated for
sssd/ldap accounts, so youll have to manage those manually.
I think there are some plans to get nss to talk to sssd to pull it
from a network source, but it isn't implemented.
https://github.com/shadow-maint/shadow/issues/154
--
Jonathan Billings <billings(a)negate.org>