6.2. Overriding the LDAP UID attribute


As an administrator, you can configure an existing host to use accounts from LDAP. However, the values for a user (name, UID, GID, home directory, shell) in LDAP are different from the values on the local system. You can override the LDAP UID attribute by defining a different UID with the following procedure.

Conditions préalables

  • root access
  • Installed sssd-tools

Procédure

  1. Display the current UID of the user:

    # id -u user-name
    Copy to Clipboard Toggle word wrap

    Replace user-name with the name of the user.

  2. Override the UID of the user’s account:

    # sss_override user-add user-name -u new-UID
    Copy to Clipboard Toggle word wrap

    Replace user-name with the name of the user and replace new-UID with the new UID number.

  3. Expire the in-memory cache:

    # sss_cache --users
    Copy to Clipboard Toggle word wrap
  4. After creating the first override using the sss_override user-add command, restart SSSD for the changes to take effect:

    # systemctl restart sssd
    Copy to Clipboard Toggle word wrap

Verification steps

  • Verify that the new UID has been applied:

    # id -u user-name
    Copy to Clipboard Toggle word wrap
  • Optional. Display the overrides for the user:

    # sss_override user-show user-name
    user@ldap.example.com::new-UID:::::
    Copy to Clipboard Toggle word wrap

    Exemple 6.2. Overriding the UID of the user

    To override the UID of the user sarah with UID 6666:

    1. Display the current UID of the user sarah:

      # id -u sarah
      1001
      Copy to Clipboard Toggle word wrap
    2. Override the UID of the user sarah's account with UID 6666:

      # sss_override user-add sarah -u 6666
      Copy to Clipboard Toggle word wrap
    3. Manually expire the in-memory cache:

      # sss_cache --users
      Copy to Clipboard Toggle word wrap
    4. Restart SSSD for the changes to take effect:

      # systemctl restart sssd
      Copy to Clipboard Toggle word wrap
    5. Verify that the new UID is applied and overrides for the user display correctly:

      # id sarah
      6666
      
      # sss_override user-show sarah
      user@ldap.example.com::6666:::::
      Copy to Clipboard Toggle word wrap
Retour au début
Red Hat logoGithubredditYoutubeTwitter

Apprendre

Essayez, achetez et vendez

Communautés

À propos de la documentation Red Hat

Nous aidons les utilisateurs de Red Hat à innover et à atteindre leurs objectifs grâce à nos produits et services avec un contenu auquel ils peuvent faire confiance. Découvrez nos récentes mises à jour.

Rendre l’open source plus inclusif

Red Hat s'engage à remplacer le langage problématique dans notre code, notre documentation et nos propriétés Web. Pour plus de détails, consultez le Blog Red Hat.

À propos de Red Hat

Nous proposons des solutions renforcées qui facilitent le travail des entreprises sur plusieurs plates-formes et environnements, du centre de données central à la périphérie du réseau.

Theme

© 2025 Red Hat