I haven't needed to change the LDAP attributes that CES uses, but I do see --user-id-attrib in the mmuserauth documentation. Unfortunately, I don't see an equivalent one for gidNumber.
On Thu, May 24, 2018 at 08:45:00AM +0000, Dorigo Alvise (PSI) wrote: > Dear members, > at PSI I'm trying to integrate the CES service with our AD authentication > system. > > My understanding, after talking to expert people here, is that I should use > the RFC2307 model for ID mapping (described here: https://goo.gl/XvqHDH). The > problem is that our ID schema is slightly different than that one described > in RFC2307. In the RFC the relevant user identification fields are named > "uidNumber" and "gidNumber". But in our AD database schema we have: > > # egrep 'uid_number|gid_number' /etc/sssd/sssd.conf > ldap_user_uid_number = msSFU30UidNumber > ldap_user_gid_number = msSFU30GidNumber > ldap_group_gid_number = msSFU30GidNumber > > My question is: is it possible to configure CES to look for the custom field > labels (those ones listed above) instead the default ones officially > described in rfc2307 ? > > many thanks. > Regards, > > Alvise Dorigo > _______________________________________________ > gpfsug-discuss mailing list > gpfsug-discuss at spectrumscale.org > http://gpfsug.org/mailman/listinfo/gpfsug-discuss -- -- Skylar Thompson (skyl...@u.washington.edu) -- Genome Sciences Department, System Administrator -- Foege Building S046, (206)-685-7354 -- University of Washington School of Medicine _______________________________________________ gpfsug-discuss mailing list gpfsug-discuss at spectrumscale.org http://gpfsug.org/mailman/listinfo/gpfsug-discuss
