uidNumber for Service Accounts?
- First Post
- Replies
- Stats
-
Go to
- ----- 2023 -----
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2008 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2007 -----
- December
Hi
Do I need uidNumber for Service Accounts used for application / server
binding if this user won't actually be resolved by sssd or nslcd?
I set a very high uidNumber but eventually this will conflict with users as
in my ignorance I didn't put this in a lower range.
Thanks,
Douglas Duckworth, MSc, LFCS
HPC System Administrator
Scientific Computing Unit
Physiology and Biophysics
Weill Cornell Medicine
E: doug(a)med.cornell.edu
O: 212-746-6305
F: 212-746-8690
Attachments:
- attachment.htm (text/html — 1.1 KB)
Douglas Duckworth wrote:
Do I need uidNumber for Service Accounts used for application /
server
binding if this user won't actually be resolved by sssd or nslcd?
In general if your client only binds to the LDAP server it doesn't need
'uidNumber' attribute. It just needs a bind-DN and a password in its
config. I assume though that your LDAP server does not have ACLs based
uidNumber-based filter affecting your client.
And I don't know whether something else in your deployment needs it.
This only you can find out.
Ciao, Michael.
On Wed, 2017-10-25 at 09:32 -0400, Douglas Duckworth wrote:
Hi
Do I need uidNumber for Service Accounts used for application /
server binding if this user won't actually be resolved by sssd or
nslcd?
I set a very high uidNumber but eventually this will conflict with
users as in my ignorance I didn't put this in a lower range.
Thanks,
Douglas Duckworth, MSc, LFCS
HPC System Administrator
Scientific Computing Unit
Physiology and Biophysics
Weill Cornell Medicine
E: doug(a)med.cornell.edu
O: 212-746-6305
F: 212-746-8690
It depends on weather your service account needs to login to a UNIX
compliant system or not. If the account doesn't have a uid, it will
most likely not be able to login as a standard UNIX account via LDAP.
If the binds go directly to an application without going through an OS
authentication layer, for example a web user login, it probably doesn't
matter either way whether the account has a uidNumber set or not. If
you have an interaction with sssd or nslcd in the middle, you are going
to need the uidNumber attribute set.
2162
days inactive
2163
days old
openldap-technical@openldap.org
2 comments
3 participants
tags (0)
participants (3)
-
Douglas Duckworth -
John Lewis -
Michael Ströder