search

himmelblau-idm / himmelblau

Azure Entra ID Authentication, with PAM and NSS modules.
GNU General Public License v3.0
25 stars 3 forks source link

SSSD Idmapping with upn mapping #131

Closed dmulder closed 2 months ago

dmulder commented 2 months ago

Fixes #71. Fixes #124.

This replaces the default idmapping. Previously idmapping was based on object id (uuid), but it is now based on user upn by default. The default idmap range has also changed. To return to the previous default (in order to keep idmapping consistent with version 0.3.x), set the following configuration variables:

[global]
id_attr_map = uuid
idmap_range = 1000000-6999999

Be aware that reverting to uuid idmapping prevents users from accessing the host via SSH (on systems which use OpenSSH Server).

Checklist