Closed dmulder closed 4 months ago
This has the obvious problem of a higher likelihood of uid collisions. Unfortunately, the 'rid' of a generated SID isn't guaranteed to be unique, as in a on-prem domain.
This has the obvious problem of a higher likelihood of uid collisions. Unfortunately, the 'rid' of a generated SID isn't guaranteed to be unique, as in a on-prem domain.
It's still an improvement over the current mapping attempt though. This will necessarily be a temporary solution, and is waiting on the Samba and SSSD communities to settle on a proper ID mapping standard.
Otherwise, I tested this, and it appears to resolve the nss issues which were happening previously. It seems that the previous id mapping attempt was inconsistent in providing ids.
Fixes #
Checklist