Re: Map subjectSid to higher number

[Arthur de Jong <arthur [at] arthurdejong.org>]

On Wed, 2019-10-02 at 15:01 +0300, Max Mustermann wrote:
> AD Users could have SubjectSid in lower range 1000-3000, which may
> cause a conflict with local users.
> Is there a way to map these values to higher numbers? So for instance
> if the mapped SubjectSid for uidNumber
> and gidNumber is 1008 could it be mapped to something like 101008,
> just to avoid conflicts if the uidNumber is already taken?

You should be able to use nss_uid_offset option to change values found
in the directory to local values. This should also work correctly in
combination with the objectSid mapping.

Hope this helps,

-- 
-- arthur - arthur@arthurdejong.org - https://arthurdejong.org/ --