I have a few Linux servers using SSSD integrated with Microsoft AD to authenticate AD users, and I'm trying override users primary group on those servers.
According to AD, the default primary group for all users is gid=100001(posixusers) and I'd like users to be assigned to a different gid. Each user would have a different primary group, with that being their UID.
So, if user john's UID is 1028 and according to AD his GID is 100001, I want to override the GID, so it would be gid=1028
I believe this can be done by using sss_override, but there are some disadvantages since I'd have to repeat the same command on each Linux server or export/import the override lists and restart sssd.
Also, I don't know how could I automate that when the user login for the first time.
How would you do that? Is there any other way, other than sss_override? If not, what would you do to automate this?
NOTE: I can't touch anything on the AD, since that's managed by a different department, so the only thing I can do is to query the AD/LDAP service.
Thanks in advance.