URL: https://github.com/SSSD/sssd/pull/644
Title: #644: When multiple UIDs exist, use the username provided by the user as 
the first lookup

simo5 commented:
"""
per posix uid *must* be unique, sorry to say your LDAP setup is simply 
violating standards and cannot be supported in a consistent way.
I do not think sssd (or any other nss ldap module) can really do anything 
useful for you here.
If you have specific systems where a user *always* must use a specific name and 
other systems where it must use the other I would suggest using id views 
(assuming we can do that for generic LDAP) to exactly determine what user name 
to use on any specific host.
In any case the only way to properly handle this is to have a source of 
information that explicitly marks *which* uid is valid and use only that for 
the system.
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/644#issuecomment-430611979
_______________________________________________
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org

Reply via email to