rootless podman: how to integrate with AD/SSSD instead of configuring in /etc/subuid /etc/subgid

[kkmm888-eng]

hi experts

we have scenairo like:

1. we have HPC cluster(linux redhat9), which scheduled by IBM LSF
2. we try to config rootless podman, but we do not want to add users to the /etc/subuid /etc/subgid file directly, since we have a lot of users which authenticated by sssd+AD
3. but without configuring /etc/subuid(subgid) , there are a lot of permission problem

my question are:

1. Is there any suggestion like to integrate with sssd/AD without configuring /etc/subuid(subgid)?

2. Is there any way to fix this permission problem? to let it work as configured in /etc/subuid(subgid)?

Thanks in advance.

[kkmm888-eng]

duplicated