SSSD-LDAP-ATTRIBUT(5) (NAME) sssd-ldap-attributes - LDAP SSSD: (DESCRIPTION) LDAP SSSD sssd-ldap(5) . LDAP SSSD sssd- ldap(5) . (USER ATTRIBUTES) ldap_user_object_class (string) (object class) LDAP. : posixAccount ldap_user_name (string) LDAP (login name) . : uid ( rfc2307 rfc2307bis IPA) sAMAccountName ( AD) ldap_user_uid_number (string) LDAP (UID) . : uidNumber ldap_user_gid_number (string) LDAP (primary group id) . : gidNumber ldap_user_primary_group (string) Active Directory (ID-mapping). "ldap" . : (LDAP) primaryGroupID ( AD) ldap_user_gecos (string) LDAP gecos . : gecos ldap_user_home_directory (string) LDAP (home directory) . : homeDirectory ( LDAP IPA) unixHomeDirectory ( AD) ldap_user_shell (string) LDAP . : loginShell ldap_user_uuid (string) LDAP UUID/GUID LDAP. : objectGUID AD ipaUniqueID IPA ldap_user_objectsid (string) LDAP objectSID LDAP. Active Directory . : objectSid ActiveDirectory . ldap_user_modify_timestamp (string) LDAP (timestamp) (parent object). : modifyTimestamp ldap_user_shadow_last_change (string) ldap_pwd_policy=shadow LDAP shadow(5) ( ) . : shadowLastChange ldap_user_shadow_min (string) ldap_pwd_policy=shadow LDAP shadow(5) ( ) . : shadowMin ldap_user_shadow_max (string) ldap_pwd_policy=shadow LDAP shadow(5) ( ) . : shadowMax ldap_user_shadow_warning (string) ldap_pwd_policy=shadow LDAP shadow(5) ( ) . : shadowWarning ldap_user_shadow_inactive (string) ldap_pwd_policy=shadow LDAP shadow(5) ( ) . : shadowInactive ldap_user_shadow_expire (string) ldap_pwd_policy=shadow ldap_account_expire_policy=shadow LDAP shadow(5) ( ) . : shadowExpire ldap_user_krb_last_pwd_change (string) ldap_pwd_policy=mit_kerberos LDAP Kerberos . : krbLastPwdChange ldap_user_krb_password_expiration (string) ldap_pwd_policy=mit_kerberos LDAP . : krbPasswordExpiration ldap_user_ad_account_expires (string) ldap_account_expire_policy=ad LDAP . : accountExpires ldap_user_ad_user_account_control (string) ldap_account_expire_policy=ad LDAP . : userAccountControl ldap_ns_account_lock (string) ldap_account_expire_policy=rhds . : nsAccountLock ldap_user_nds_login_disabled (string) ldap_account_expire_policy=nds . : loginDisabled ldap_user_nds_login_expiration_time (string) ldap_account_expire_policy=nds . : loginDisabled ldap_user_nds_login_allowed_time_map (string) ldap_account_expire_policy=nds . : loginAllowedTimeMap ldap_user_principal (string) LDAP (Kerberos User Principal Name UPN). : krbPrincipalName ldap_user_extra_attrs (string) LDAP SSSD . LDAP (cache) SSSD LDAP . LDAP . SSSD SSSD (schemas) LDAP . SSSD "name". SSSD . : ldap_user_extra_attrs = telephoneNumber "telephoneNumber" LDAP "telephoneNumber" . ldap_user_extra_attrs = phone:telephoneNumber "telephoneNumber" LDAP "phone" . : ldap_user_ssh_public_key (string) LDAP SSH . : sshPublicKey ldap_user_fullname (string) LDAP . : cn ldap_user_member_of (string) LDAP . : memberOf ldap_user_authorized_service (string) access_provider=ldap ldap_access_order=authorized_service SSSD authorizedService LDAP . (!svc) . SSSD (svc) (*) . ldap_access_order "authorized_service" ldap_user_authorized_service . ( Fedora-29+ RHEL-8) PAM "systemd-user" . "systemd-user" . : authorizedService ldap_user_authorized_host (string) access_provider=ldap ldap_access_order=host SSSD host LDAP . (!host) . SSSD (host) (*) . ldap_access_order "host" ldap_user_authorized_host . : host ldap_user_authorized_rhost (string) access_provider=ldap ldap_access_order=rhost SSSD rhost LDAP . (!rhost) . SSSD (rhost) (*) . ldap_access_order "rhost" ldap_user_authorized_rhost . : rhost ldap_user_certificate (string) LDAP X509 . : userCertificate;binary ldap_user_email (string) LDAP . : SSSD . () () . / . : mail ldap_user_passkey (string) LDAP (passkey mapping data) . : passkey ( LDAP) ipaPassKey ( IPA) altSecurityIdentities ( AD) (GROUP ATTRIBUTES) ldap_group_object_class (string) (object class) LDAP. : posixGroup ldap_group_name (string) LDAP . LDAP . POSIX . : cn ( rfc2307 rfc2307bis IPA) sAMAccountName ( AD) ldap_group_gid_number (string) LDAP (GID) . : gidNumber ldap_group_member (string) LDAP . : memberuid ( rfc2307) / member ( rfc2307bis) ldap_group_uuid (string) LDAP UUID/GUID LDAP. : objectGUID AD ipaUniqueID IPA ldap_group_objectsid (string) LDAP objectSID LDAP. Active Directory . : objectSid ActiveDirectory . ldap_group_modify_timestamp (string) LDAP (timestamp) (parent object). : modifyTimestamp ldap_group_type (string) LDAP . AD (domain local groups) . : groupType AD ldap_group_external_member (string) LDAP . IPA . : ipaExternalMember IPA . (NETGROUP ATTRIBUTES) ldap_netgroup_object_class (string) (object class) LDAP. IPA ipa_netgroup_object_class . : nisNetgroup ldap_netgroup_name (string) LDAP . IPA ipa_netgroup_name . : cn ldap_netgroup_member (string) LDAP . IPA ipa_netgroup_member . : memberNisNetgroup ldap_netgroup_triple (string) LDAP (host, user, domain). IPA . : nisNetgroupTriple ldap_netgroup_modify_timestamp (string) LDAP . IPA . : modifyTimestamp (HOST ATTRIBUTES) ldap_host_object_class (string) (object class) LDAP. : ipService ldap_host_name (string) LDAP . : cn ldap_host_fqdn (string) LDAP (FQDN) . : fqdn ldap_host_serverhostname (string) LDAP . : serverHostname ldap_host_member_of (string) LDAP . : memberOf ldap_host_ssh_public_key (string) LDAP SSH . : sshPublicKey ldap_host_uuid (string) LDAP UUID/GUID LDAP. : (SERVICE ATTRIBUTES) ldap_service_object_class (string) (object class) LDAP. : ipService ldap_service_name (string) LDAP . : cn ldap_service_port (string) LDAP (port) . : ipServicePort ldap_service_proto (string) LDAP . : ipServiceProtocol SUDO (SUDO ATTRIBUTES) ldap_sudorule_object_class (string) (object class) sudo LDAP. : sudoRole ldap_sudorule_name (string) LDAP sudo. : cn ldap_sudorule_command (string) LDAP . : sudoCommand ldap_sudorule_host (string) LDAP ( IP IP ) : sudoHost ldap_sudorule_user (string) LDAP ( UID ) : sudoUser ldap_sudorule_option (string) LDAP sudo. : sudoOption ldap_sudorule_runasuser (string) LDAP . : sudoRunAsUser ldap_sudorule_runasgroup (string) LDAP GID . : sudoRunAsGroup ldap_sudorule_notbefore (string) LDAP / sudo. : sudoNotBefore ldap_sudorule_notafter (string) LDAP / sudo . : sudoNotAfter ldap_sudorule_order (string) LDAP (ordering index) . : sudoOrder AUTOFS (AUTOFS ATTRIBUTES) ldap_autofs_map_object_class (string) (object class) (automount map) LDAP. : nisMap ( rfc2307 autofs_provider=ad) automountMap ldap_autofs_map_name (string) LDAP. : nisMapName ( rfc2307 autofs_provider=ad) automountMapName ldap_autofs_entry_object_class (string) (object class) (automount) LDAP. (mount point) . : nisObject ( rfc2307 autofs_provider=ad) automount ldap_autofs_entry_key (string) LDAP. . : cn ( rfc2307 autofs_provider=ad) automountKey ldap_autofs_entry_value (string) LDAP. . : nisMapEntry ( rfc2307 autofs_provider=ad) automountInformation IP (IP HOST ATTRIBUTES) ldap_iphost_object_class (string) (object class) iphost LDAP. : ipHost ldap_iphost_name (string) LDAP IP . : cn ldap_iphost_number (string) LDAP IP . : ipHostNumber IP (IP NETWORK ATTRIBUTES) ldap_ipnetwork_object_class (string) (object class) ipnetwork LDAP. : ipNetwork ldap_ipnetwork_name (string) LDAP IP . : cn ldap_ipnetwork_number (string) LDAP IP. : ipNetworkNumber (SUBID ATTRIBUTES) ldap_subuid_object_class (string) (object class) subid LDAP. : subordinateIdEntry ldap_subuid_count (string) ( ) : subUidCount ldap_subgid_count (string) ( ) : subGidCount ldap_subuid_number (string) ( ) : subUidNumber ldap_subgid_number (string) ( ) : subGidNumber ldap_subid_range_owner (string) : subidRangeOwner (SEE ALSO) sssd(8), sssd.conf(5), sssd-ldap(5), sssd-ldap-attributes(5), sssd- krb5(5), sssd-simple(5), sssd-ipa(5), sssd-ad(5), sssd-idp(5), sssd- sudo(5), sssd-session-recording(5), sss_cache(8), sss_debuglevel(8), sss_obfuscate(8), sss_seed(8), sssd_krb5_locator_plugin(8), sss_ssh_authorizedkeys(1), sss_ssh_knownhosts(1), sssd-ifp(5), pam_sss(8). sss_rpcidmapd(5) (AUTHORS) SSSD - https://github.com/SSSD/sssd/ SSSD 06/09/2026 SSSD-LDAP-ATTRIBUT(5)