If I have ldap_id_mapping turned on, how does SSSD determine a user's primary group? I don't think ldap_user_gid_number is used in this case, since the numeric IDs are determined on the client side.
Thanks, Jacob
On Mon, Aug 04, 2014 at 09:25:30AM -0700, Jacob Weber wrote:
If I have ldap_id_mapping turned on, how does SSSD determine a user's primary group? I don't think ldap_user_gid_number is used in this case, since the numeric IDs are determined on the client side.
Thanks, Jacob
Hi,
see the sssd-ad man page, there is a section called 'Mapping Algorithm' that hopefully answers your question.
For AD users, the GID is typically derived from Domain Users.
sssd-users@lists.fedorahosted.org