freeipa

#7109 Add support for local Unix user or group SIDs into FreeIPA MS-PAC
Opened by abbra. Modified

Open
Close Issue

Samba since version 3.0.23c uses S-1-22-1-UID and S-1-22-2-GID SIDs to represent UID and GID of a POSIX user in its local user token. It originally started as a way to express SIDs of unmapped users/groups but since then it is done unconditionally for all users and groups.

Add the same SIDs into MS-PAC generated by FreeIPA KDC.

A corresponding SSSD ticket: https://pagure.io/SSSD/sssd/issue/3483

Metadata Update from @pvoborni:
- Issue set to the milestone: FreeIPA 4.7

Metadata Update from @rcritten:
- Issue set to the milestone: FreeIPA 4.7.1 (was: FreeIPA 4.7)

FreeIPA 4.7 has been released, moving to FreeIPA 4.7.1 milestone
Metadata
None
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.