On Mon, Sep 15, 2025 at 3:07 PM Rust, Frank <f.r...@tu-braunschweig.de> wrote:
> This is a random number of users out of our University ldap. There is no > group information other than the "student" information. > I have only read access to the ldap (and password auth). > Would it be possible to get the group membership from a different server? > > Best,Frank > That can be theoretically done but outside SSSD. You can set up your own LDAP as a proxy that can combine university LDAP with another (your own or remote) and point SSSD to that proxy instance. But it looks like a lot of work for one system. If there is no information in another ldap server and it is just one system to manage I would go with some Ansible automation script that updates sssd.conf (or better configuration snippet in sssd.d). HTH Tomáš
-- _______________________________________________ sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue