Hi,
I've sssd running with ldap provider and therefore use a binding account.
In general everything works. I've a question regarding the primary group.
When I login with any user who I permitted to in the sssd.conf all users have the Domain Users gorup as primary group.
So if I create a file with User a ownership is UserA:Domain\ Users Same goes for UserB etc.
Can I have influence on the primary group of the sssd users? Because this seems quite insecure for me. Because I use different permissions for different users (configured via sudoers files). But if every user is in the same group..
Thanks for your input!
Jannis