Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have several CentOS 4 machines that I decided to have authenticate against a Win2008 DC via LDAPS, so when an Active Directory user logs in with his credentials on a server, it creates the user's directory and sets him up.

Thing is, the servers also has local user accounts (like for customers' webspaces on the webservers, and other misc. local accounts) and after setting up LDAPS authentication, these account UIDs (from 500+) are now being set up in the 10000 range with our AD accounts. The local accounts are either generated by script or manually on the machine.

I just want the two ranges to be separate. The man page for useradd says

-o uid ... The default is to use the smallest ID value greater than 99 and greater than every other user.

Any way around that or to configure it? I'd like to have a distinction between local accounts and AD accounts.

share|improve this question

1 Answer 1

up vote 7 down vote accepted

Check out UID_MIN & UID_MAX in /etc/login.defs to control what the range is for local users.

share|improve this answer
    
Thanks, just what I'm looking for. –  kdingo Sep 20 '09 at 20:15

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.