Differences

This shows you the differences between two versions of the page.

--- linux:pam_users [2022/11/07 16:20]
manu
+++ linux:pam_users [2022/11/07 16:28] (current)
manu
@@ Line 91: / Line 91: @@
 # systemctl restart sssd
 </cli>
+==== Use AD UID and GID ====
+By default, the AD provider will map UID and GID values from the objectSID parameter in Active Directory.
+For details on this, see the “ID MAPPING” section below.
+If you want to disable ID mapping and instead rely on POSIX attributes defined in Active Directory, you should set
+  ldap_id_mapping = False
+SSSD configuration would depend on what attributes are used in AD. The defaults for UID and GID are **uidNumber** and **gidNumber**, but some defaults change based on which version of SSSD you are running. Check the manpage for the release you are using.

wiki