idmap_sss - SSSD's idmap_sss Backend for Winbind
The idmap_sss module provides a way to call SSSD to map UIDs/GIDs and SIDs. No
database is required in this case as the mapping is done by SSSD.
range = low - high
Defines the available matching UID and GID range for
which the backend is authoritative.
This example shows how to configure idmap_sss as the default mapping module.
[global]
security = domain
workgroup = MAIN
idmap config * : backend = sss
idmap config * : range = 200000-2147483647
sssd(8), sssd.conf(5), sssd-ldap(5), sssd-krb5(5),
sssd-simple(5), sssd-ipa(5), sssd-ad(5),
sssd-sudo(5), sssd-session-recording(5), sss_cache(8),
sss_debuglevel(8), sss_groupadd(8), sss_groupdel(8),
sss_groupshow(8), sss_groupmod(8), sss_useradd(8),
sss_userdel(8), sss_usermod(8), sss_obfuscate(8),
sss_seed(8), sssd_krb5_locator_plugin(8),
sss_ssh_authorizedkeys(8), sss_ssh_knownhostsproxy(8),
sssd-ifp(5), pam_sss(8). sss_rpcidmapd(5)
The SSSD upstream - https://pagure.io/SSSD/sssd/