#2238 Set a higher min_id for IPA provider by default
Closed: Invalid None Opened 10 years ago by jhrozek.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 6): Bug 1063468

Description of problem: Creating system accounts/groups on IdM environment
takes long time, (bug #1020905). Request to set a min_id if the provider is
IPA. (min_id > SYS_GID_MAX)

How reproducible:


Steps to Reproduce:
1. NA


Actual results: Currently sssd uses the default min_id (1) for ipa provider.


Expected results: If ipa provider is used, sssd should use higher min_id by
default.


Additional info:

https://bugzilla.redhat.com/show_bug.cgi?id=1020905

We need to decide whether raising the min_id is safe or whether we just document the need to set min_id when adding system groups proves to be slow

blockedby: =>
blocking: =>
changelog: =>
coverity: =>
design: =>
design_review: => 0
feature_milestone: =>
fedora_test_page: =>
review: True => 0
selected: =>
testsupdated: => 0

Alexander suggested we might try to detect scanning of the ID space based on PIDs and act only then.

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.12 beta

There is an easy workaround, but we can set the limit earlier should we need to.

milestone: SSSD 1.12 beta => SSSD 1.13 beta

Fields changed

mark: => 0

I think we can safely close, Stephen kindly fixed shadow-utils in the meantime.

milestone: SSSD 1.13 beta => SSSD 1.13 backlog
priority: major => trivial

Mass-moving tickets not planned for any immediate release and re-setting priority.

milestone: SSSD 1.13 backlog => SSSD Deferred
priority: trivial => major

Closing. @see comment 7

resolution: => wontfix
status: new => closed

Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD Patches welcome

7 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/3280

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata