try adding
enumerate = true
to your sssd.conf clearing the cache and restart sssd.
regards,
Aaron
On 4/30/2014 8:51 AM, Enrico Morelli wrote:
Dear all,
I'm a new user about 389 DS. I installed it on a RHEL 6 (32bit) server:
89-admin-console-doc-1.1.8-1.el6.noarch
389-ds-1.2.2-1.el6.noarch
389-ds-base-1.2.11.15-32.el6_5.i686
389-ds-base-libs-1.2.11.15-32.el6_5.i686
389-ds-console-1.2.6-1.el6.noarch
389-admin-console-1.1.8-1.el6.noarch
389-dsgw-1.1.11-1.el6.i686
389-admin-1.1.35-1.el6.i686
389-adminutil-1.1.19-1.el6.i686
389-ds-console-doc-1.2.6-1.el6.noarch
389-console-1.1.7-1.el6.noarch
I've troubles with groups. I created posix user and group. I'm able to
login on the Linux client (SL 6 32bit) but I receive the error: cannot
find name for group ID.
I had search on google to find a solution, but all the suggestions I've
find didn't work for me.
This is the sssd.conf on the client, with all attempts to solve the
problem
-----------------------------------------------
[domain/default]
ldap_schema = rfc2307bis
ldap_id_use_start_tls = True
cache_credentials = True
ldap_search_base = dc=mydomain,dc=it
#krb5_realm =
EXAMPLE.COM
#krb5_server =
kerberos.example.com
id_provider = ldap
auth_provider = ldap
chpass_provider = ldap
ldap_uri = ldaps://myserver
ldap_tls_cacertdir = /etc/openldap/cacerts
entry_cache_timeout = 600
ldap_network_timeout = 3
#ldap_group_name = uniqueMember
ldap_group_object_class = groupofuniquenames
[sssd]
services = nss, pam
config_file_version = 2
domains = default
-----------------------------------------------------------------
If I add the member to the group through the management console
group->Members->Static Group, switch on the ldap_group_name =
uniqueMember parameter on the client, clear cache, restart sssd and
type id user I obtain:
uid=1001(morelli)
gid=1001(uid=morelli,cn=students,ou=Groups,dc=mydoman,dc=it)
groups=1001(uid=morelli,cn=students,ou=Groups,dc=mydomain,dc=it)
There is a way to solve the problem?
Thanks