On Mon, Aug 04, 2014 at 09:25:30AM -0700, Jacob Weber wrote:
If I have ldap_id_mapping turned on, how does SSSD determine a
user's primary group? I don't think
ldap_user_gid_number is used in this case, since the numeric IDs are determined on the
client side.
Thanks,
Jacob
Hi,
see the sssd-ad man page, there is a section called 'Mapping Algorithm'
that hopefully answers your question.
For AD users, the GID is typically derived from Domain Users.