Samba since version 3.0.23c uses S-1-22-1-UID and S-1-22-2-GID SIDs to represent UID and GID of a POSIX user in its local user token. It originally started as a way to express SIDs of unmapped users/groups but since then it is done unconditionally for all users and groups.
Add the same SIDs into MS-PAC generated by FreeIPA KDC.
A corresponding SSSD ticket: https://pagure.io/SSSD/sssd/issue/3483
Metadata Update from @pvoborni:
- Issue set to the milestone: FreeIPA 4.7
Metadata Update from @rcritten:
- Issue set to the milestone: FreeIPA 4.7.1 (was: FreeIPA 4.7)
FreeIPA 4.7 has been released, moving to FreeIPA 4.7.1 milestone
to comment on this ticket.