On Mon, Sep 15, 2025 at 3:07 PM Rust, Frank <f.r...@tu-braunschweig.de>
wrote:

> This is a random number of users out of our University ldap. There is no
> group information other than the "student" information.
> I have only read access to the ldap (and password auth).
> Would it be possible to get the group membership from a different server?
>
> Best,Frank
>

That can be theoretically done but outside SSSD. You can set up your own
LDAP as a proxy that can combine university LDAP with another (your own or
remote) and point SSSD to that proxy instance.

But it looks like a lot of work for one system. If there is no information
in another ldap server and it is just one system to manage I would go with
some Ansible automation script that updates sssd.conf (or better
configuration snippet in sssd.d).


HTH
Tomáš
-- 
_______________________________________________
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to