Hi Sumit, I saw that option the moment I've sent this mail. Unfortunately we've a lot of ubuntu 16.04 and debian 9 machines where 1.16 doesn't run. It is not planned to upgrade these machines anytime soon.
Is there another possibility to achieve this? Thanks :) Am Do., 12. März 2020 um 11:19 Uhr schrieb Sumit Bose <[email protected]>: > On Thu, Mar 12, 2020 at 09:26:49AM +0100, Jannis Mann wrote: > > Hi, > > > > I've sssd running with ldap provider and therefore use a binding account. > > > > In general everything works. I've a question regarding the primary group. > > > > When I login with any user who I permitted to in the sssd.conf all users > > have the Domain Users gorup as primary group. > > > > So if I create a file with User a ownership is UserA:Domain\ Users > > Same goes for UserB etc. > > > > Can I have influence on the primary group of the sssd users? Because this > > seems quite insecure for me. Because I use different permissions for > > different users (configured via sudoers files). But if every user is in > the > > same group.. > > Hi, > > recent versions of SSSD have the option 'auto_private_groups', please > check the sssd.conf man page if this option is available for your > version and if yes you can find more details their as well. > > If this option is not listed in your man page you can check > https://mzidek.fedorapeople.org/sssd/2.2.3/man/sssd.conf.5.html if it > might be worth to upgrade? > > HTH > > bye, > Sumit > > > > > Thanks for your input! > > > > Jannis > > > _______________________________________________ > > sssd-users mailing list -- [email protected] > > To unsubscribe send an email to [email protected] > > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] > _______________________________________________ > sssd-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] >
_______________________________________________ sssd-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected]
