AveryFreeman's questions

我有一个带有 IDMU 并UID/GID为我的域用户指定的 AD 环境。UID/GIDSSSD 连接的域用户在 Ubuntu 上与 AD共享不同的内容。

sssd.conf这是Ubuntu 20.10 中未编辑的默认设置：

% sssd --version
2.3.1

# cat /etc/sssd/sssd.conf 

[sssd]
domains = webtool.space
config_file_version = 2

[domain/webtool.space]
default_shell = /bin/bash
krb5_store_password_if_offline = True
cache_credentials = True
krb5_realm = MYDOMAIN.SPACE
realmd_tags = manages-system joined-with-adcli 
id_provider = ad
fallback_homedir = /home/%u@%d
ad_domain = mydomain.space
use_fully_qualified_names = True
ldap_id_mapping = True
access_provider = ad

如果用户名Auser有 aUID和10001a我希望这些数字会在其他平台上持续存在，对吗GID？10001

但 SSSD 似乎分配任意UID/GID与 AD 编号没有对应关系。这是一个真实的例子：

% su [email protected]                                        
Password: 
[email protected]@myhostname:~/$ id

uid=397401108([email protected])
gid=397400512(domain [email protected])
groups=397400512(domain [email protected]),
397400513(domain [email protected]),
397400518(schema [email protected]),
397400519(enterprise [email protected]),
397400572(denied rodc password replication [email protected]),
397401109([email protected]),
397401112(vcsa [email protected]),
397404603([email protected]),
397407607([email protected])

有什么办法可以防止这种行为？我希望我UID/GID与域控制器上分配的值相对应。

更新：

感谢出色的第一个答案，制作映射 1-1 所需的只是停止 SSSD 服务，删除缓存，ldap_id_mapping从更改True为False.

现在UID/GID与 AD 相同：

% id
uid=10000(auser) gid=10001(administrators) groups=10001(administrators),3109([email protected]),10000(domain [email protected])

现在要弄清楚为什么我错过了我的用户所属的一些组......

我Pin-Priority设置了几个文件，/etc/apt/preferences.d/但它们的设置没有反映在apt-cache policy

例子：

avery@ChubbyChipmunk:/etc/apt/preferences.d$ ls -la

total 23
drwxr-xr-x 2 root root  7 Oct 22 08:25 .
drwxr-xr-x 7 root root 11 Oct 22 08:13 ..
-rw-r--r-- 1 root root 61 Oct 22 08:19 all-i386
-rw-r--r-- 1 root root 72 Oct 22 08:20 groovy-proposed
-rw-r--r-- 1 root root 59 Oct 22 08:19 origin-pop-os
-rw-r--r-- 1 root root 62 Oct 22 08:20 origin-ppa
-rw-r--r-- 1 root root 66 Oct 22 08:25 origin-ppa-launchpad-net-system76-pop-ubuntu

avery@ChubbyChipmunk:/etc/apt/preferences.d$ cat *

Package: *
  Pin: release o=Ubuntu,b=i386
  Pin-Priority: 50
Package: *
  Pin: release o=Ubuntu,a=groovy-proposed
  Pin-Priority: 50
Package: *
  Pin: origin apt.pop-os.org
  Pin-Priority: 50
Package: *
  Pin: origin ppa.launchpad.net
  Pin-Priority: 50
Package: *
  Pin: release o=LP-PPA-system76-pop
  Pin-Priority: 1

avery@ChubbyChipmunk:/etc/apt/preferences.d$ sudo apt update

Hit:1 http://apt.pop-os.org/proprietary groovy InRelease
Hit:2 http://dl.google.com/linux/chrome/deb stable InRelease                   
Hit:3 https://download.mono-project.com/repo/ubuntu stable-focal InRelease     
Hit:4 http://packages.microsoft.com/ubuntu/18.04/mssql-server-2019 bionic InRelease
Hit:5 http://ppa.launchpad.net/linuxuprising/shutter/ubuntu groovy InRelease   
Hit:6 https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_20.04  InRelease
Hit:7 http://ppa.launchpad.net/system76/pop/ubuntu groovy InRelease            
Hit:8 http://ppa.launchpad.net/webupd8team/y-ppa-manager/ubuntu focal InRelease
Get:9 http://ppa.launchpad.net/system76/pop/ubuntu groovy/main amd64 Packages [44.4 kB]
Get:10 http://ppa.launchpad.net/system76/pop/ubuntu groovy/main Translation-en [18.1 kB]
Hit:11 http://mirrors.vcea.wsu.edu/ubuntu groovy InRelease   
Hit:12 http://mirrors.vcea.wsu.edu/ubuntu groovy-updates InRelease             
Hit:13 http://mirrors.vcea.wsu.edu/ubuntu groovy-backports InRelease           
Get:14 http://mirrors.vcea.wsu.edu/ubuntu groovy-security InRelease [88.4 kB]  
Hit:15 http://mirrors.vcea.wsu.edu/ubuntu groovy-proposed InRelease            
Hit:17 https://packages.microsoft.com/ubuntu/18.04/prod bionic InRelease       
Hit:18 http://archive.canonical.com/ubuntu groovy InRelease                    
Hit:16 https://packagecloud.io/slacktechnologies/slack/debian jessie InRelease 
Fetched 151 kB in 6s (26.2 kB/s)
Reading package lists... Done
Building dependency tree       
Reading state information... Done
26 packages can be upgraded. Run 'apt list --upgradable' to see them.

avery@ChubbyChipmunk:/etc/apt/preferences.d$ apt-cache policy

Package files:
 100 /var/lib/dpkg/status
     release a=now
 500 http://ppa.launchpad.net/webupd8team/y-ppa-manager/ubuntu focal/main amd64 Packages
     release v=20.04,o=LP-PPA-webupd8team-y-ppa-manager,a=focal,n=focal,l=Y PPA Manager,c=main,b=amd64
     origin ppa.launchpad.net
 500 http://ppa.launchpad.net/system76/pop/ubuntu groovy/main amd64 Packages
     release v=20.10,o=LP-PPA-system76-pop,a=groovy,n=groovy,l=Pop!_OS PPA,c=main,b=amd64
     origin ppa.launchpad.net
 500 https://packagecloud.io/slacktechnologies/slack/debian jessie/main amd64 Packages
     release v=1,o=packagecloud.io/slacktechnologies/slack,a=jessie,n=jessie,l=slack,c=main,b=amd64
     origin packagecloud.io
 500 http://apt.pop-os.org/proprietary groovy/main amd64 Packages
     release v=20.10,o=system76,a=groovy,n=groovy,l=System76,c=main,b=amd64
     origin apt.pop-os.org
 500 https://download.mono-project.com/repo/ubuntu stable-focal/main amd64 Packages
     release v=20.04,o=XamarinFocal,a=stable-focal,n=focal,l=Xamarin-Stable-Focal,c=main,b=amd64
     origin download.mono-project.com
 500 https://packages.microsoft.com/ubuntu/18.04/prod bionic/main amd64 Packages
     release o=microsoft-ubuntu-bionic-prod bionic,a=bionic,n=bionic,l=microsoft-ubuntu-bionic-prod bionic,c=main,b=amd64
     origin packages.microsoft.com
 500 http://ppa.launchpad.net/linuxuprising/shutter/ubuntu groovy/main amd64 Packages
     release v=20.10,o=LP-PPA-linuxuprising-shutter,a=groovy,n=groovy,l=Shutter screenshot tool and dependencies,c=main,b=amd64
     origin ppa.launchpad.net
 500 http://dl.google.com/linux/chrome/deb stable/main amd64 Packages
     release v=1.0,o=Google LLC,a=stable,n=stable,l=Google,c=main,b=amd64
     origin dl.google.com
 500 https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_20.04  Packages
     release o=obs://build.opensuse.org/devel:kubic:libcontainers:stable/xUbuntu_20.04,n=xUbuntu_20.04,l=devel:kubic:libcontainers:stable,c=
     origin download.opensuse.org
 500 http://packages.microsoft.com/ubuntu/18.04/mssql-server-2019 bionic/main amd64 Packages
     release o=mssql-server-2019-bionic bionic,a=bionic,n=bionic,l=mssql-server-2019-bionic bionic,c=main,b=amd64
     origin packages.microsoft.com
 500 http://mirrors.vcea.wsu.edu/ubuntu groovy-proposed/main i386 Packages
     release v=20.10,o=Ubuntu,a=groovy-proposed,n=groovy,l=Ubuntu,c=main,b=i386
     origin mirrors.vcea.wsu.edu
 500 http://mirrors.vcea.wsu.edu/ubuntu groovy-proposed/main amd64 Packages
     release v=20.10,o=Ubuntu,a=groovy-proposed,n=groovy,l=Ubuntu,c=main,b=amd64
     origin mirrors.vcea.wsu.edu
 500 http://mirrors.vcea.wsu.edu/ubuntu groovy-proposed/multiverse i386 Packages
     release v=20.10,o=Ubuntu,a=groovy-proposed,n=groovy,l=Ubuntu,c=multiverse,b=i386
     origin mirrors.vcea.wsu.edu
 500 http://mirrors.vcea.wsu.edu/ubuntu groovy-proposed/multiverse amd64 Packages
     release v=20.10,o=Ubuntu,a=groovy-proposed,n=groovy,l=Ubuntu,c=multiverse,b=amd64
     origin mirrors.vcea.wsu.edu
 500 http://mirrors.vcea.wsu.edu/ubuntu groovy-proposed/restricted i386 Packages
     release v=20.10,o=Ubuntu,a=groovy-proposed,n=groovy,l=Ubuntu,c=restricted,b=i386
     origin mirrors.vcea.wsu.edu
 500 http://mirrors.vcea.wsu.edu/ubuntu groovy-proposed/restricted amd64 Packages
     release v=20.10,o=Ubuntu,a=groovy-proposed,n=groovy,l=Ubuntu,c=restricted,b=amd64
     origin mirrors.vcea.wsu.edu
 500 http://mirrors.vcea.wsu.edu/ubuntu groovy-proposed/universe i386 Packages
     release v=20.10,o=Ubuntu,a=groovy-proposed,n=groovy,l=Ubuntu,c=universe,b=i386
     origin mirrors.vcea.wsu.edu
 500 http://mirrors.vcea.wsu.edu/ubuntu groovy-proposed/universe amd64 Packages
     release v=20.10,o=Ubuntu,a=groovy-proposed,n=groovy,l=Ubuntu,c=universe,b=amd64
     origin mirrors.vcea.wsu.edu
 500 http://mirrors.vcea.wsu.edu/ubuntu groovy-security/universe i386 Packages
     release v=20.10,o=Ubuntu,a=groovy-security,n=groovy,l=Ubuntu,c=universe,b=i386
     origin mirrors.vcea.wsu.edu
 500 http://mirrors.vcea.wsu.edu/ubuntu groovy-security/universe amd64 Packages
     release v=20.10,o=Ubuntu,a=groovy-security,n=groovy,l=Ubuntu,c=universe,b=amd64
     origin mirrors.vcea.wsu.edu
 500 http://mirrors.vcea.wsu.edu/ubuntu groovy-security/main i386 Packages
     release v=20.10,o=Ubuntu,a=groovy-security,n=groovy,l=Ubuntu,c=main,b=i386
     origin mirrors.vcea.wsu.edu
 500 http://mirrors.vcea.wsu.edu/ubuntu groovy-security/main amd64 Packages
     release v=20.10,o=Ubuntu,a=groovy-security,n=groovy,l=Ubuntu,c=main,b=amd64
     origin mirrors.vcea.wsu.edu
 500 http://archive.canonical.com/ubuntu groovy/partner amd64 Packages
     release v=20.10,o=Canonical,a=groovy,n=groovy,l=Partner archive,c=partner,b=amd64
     origin archive.canonical.com
 500 http://mirrors.vcea.wsu.edu/ubuntu groovy/multiverse i386 Packages
     release v=20.10,o=Ubuntu,a=groovy,n=groovy,l=Ubuntu,c=multiverse,b=i386
     origin mirrors.vcea.wsu.edu
 500 http://mirrors.vcea.wsu.edu/ubuntu groovy/multiverse amd64 Packages
     release v=20.10,o=Ubuntu,a=groovy,n=groovy,l=Ubuntu,c=multiverse,b=amd64
     origin mirrors.vcea.wsu.edu
 500 http://mirrors.vcea.wsu.edu/ubuntu groovy/universe i386 Packages
     release v=20.10,o=Ubuntu,a=groovy,n=groovy,l=Ubuntu,c=universe,b=i386
     origin mirrors.vcea.wsu.edu
 500 http://mirrors.vcea.wsu.edu/ubuntu groovy/universe amd64 Packages
     release v=20.10,o=Ubuntu,a=groovy,n=groovy,l=Ubuntu,c=universe,b=amd64
     origin mirrors.vcea.wsu.edu
 500 http://mirrors.vcea.wsu.edu/ubuntu groovy/restricted i386 Packages
     release v=20.10,o=Ubuntu,a=groovy,n=groovy,l=Ubuntu,c=restricted,b=i386
     origin mirrors.vcea.wsu.edu
 500 http://mirrors.vcea.wsu.edu/ubuntu groovy/restricted amd64 Packages
     release v=20.10,o=Ubuntu,a=groovy,n=groovy,l=Ubuntu,c=restricted,b=amd64
     origin mirrors.vcea.wsu.edu
 500 http://mirrors.vcea.wsu.edu/ubuntu groovy/main i386 Packages
     release v=20.10,o=Ubuntu,a=groovy,n=groovy,l=Ubuntu,c=main,b=i386
     origin mirrors.vcea.wsu.edu
 500 http://mirrors.vcea.wsu.edu/ubuntu groovy/main amd64 Packages
     release v=20.10,o=Ubuntu,a=groovy,n=groovy,l=Ubuntu,c=main,b=amd64
     origin mirrors.vcea.wsu.edu
Pinned packages:

以前可以Pin-Priority上班，不知道怎么回事。我已经花了两个小时试图弄清楚，我只需要注释掉.list文件中的 repos。

我想我要在启动板中提交错误报告。

有任何想法吗？

尝试在 Apollo Lake 主板 (Asrock j3455b-itx) 上安装 Ubuntu 16.10。无法启动它。尝试了几种扭曲无济于事的黑屏，光标不闪烁。

我在某处读到 j3455 需要内核 4.7 或更高版本，所以我认为 Ubuntu 16.10（内核 4.8）可以工作，但它与其他所有版本的功能相同。

有没有人有这方面的经验可以帮助我？

谢谢，艾弗里

编辑：USB 驱动器是在 Windows 10 上使用 Rufus 2.11 创建的。Manjaro 17 alpha 2 工作正常，Manjaro 16.10.3 也使用 4.8 内核重新旋转（对于那些不熟悉的人，它是 Arch 的衍生产品）。

解决方案：第一个答案对我有用 - 在 BIOS 中，转到 BOOT --> CSM 并将 USB 更改为 Legacy Support。如果你看到这个，请给他投票。

请注意：此主板仍需要 4.7 或更高版本的内核才能正常运行。提到的解决方案只是增加了许多发行版启动所需的兼容性。

要解决内核问题，可以使用使用 4.7+ 内核的发行版，或者创建自定义 ISO。我按照本指南创建了一个带有 4.9 内核的 Mint 18.1 的自定义 live USB：https ://community.linuxmint.com/tutorial/view/1784