sssd installed on a server to use Active Directory accounts and can connect, but am seeing that the UIDs for AD users are very wrong (eg. an AD users posix UID is set to 1234, but I see something big like 987654987654 on the sssd machine). The
/etc/sssd/sssd.conf file looks like...
[sssd] domains = ucera.local config_file_version = 2 services = nss, pam [domain/ucera.local] ad_domain = co.local krb5_realm = CO.LOCAL realmd_tags = manages-system joined-with-samba cache_credentials = False id_provider = ad krb5_store_password_if_offline = False default_shell = /bin/bash ldap_id_mapping = True use_fully_qualified_names = False fallback_homedir = /home/%u access_provider = ad default_domain_suffix = co.local
Any ideas why this could be happening? Any debugging advice?
I also notice that I sometimes have problems logging into the machine with AD users. Eg. when trying to ssh into server I get password denied, but when ssh in as root then
su into that user and exit, I can then ssh into server directly as that AD user (like the server does not realize it has that user until I "remind" it by
su'ing into as that user) (not sure if related).