mourik jan heupink
2014-Jan-22 16:58 UTC
[Samba] sssd / classicupgrade / computer accounts
Hi all, After classicupgrade my machine accounts are placed in a separate CN=Computers, with objectclasses: - posixAccount - person - organisationalPerson - user - computer Taking my sssd configuration from https://wiki.samba.org/index.php/Local_user_management_and_authentication/sssd, I have this config: ... ldap_user_object_class = user ... Meaning all my computer accounts are included in getent passwd, etc. If possible I would like to stay with stock wheezy/sssd 1.8.4, but I would like my machine accounts to be excluded from sssd... Is that possible, or do I want too much? ;-) (or related... is the classicupgrade correct, giving machine accounts an objectclass "person"?) Regards, MJ -- Mourik Jan Heupink sys admin unu-merit - www.merit.unu.edu
On Wed, 2014-01-22 at 17:58 +0100, mourik jan heupink wrote:> Hi all, > > After classicupgrade my machine accounts are placed in a separate > CN=Computers, with objectclasses: > - posixAccountThe only way I know is to remove: objectClass: posixAccount from your machine objects. As it shouldn't be there in the first place I'd advise removing it now. HTH Steve