On Wed, 30 Apr 2014 08:57:58 -0400
Ssureshot <ssureshot(a)gmail.com> wrote:
try adding
enumerate = true
to your sssd.conf clearing the cache and restart sssd.
regards,
Aaron
Other two questions.
1) Is it better to add user to People (and under posix set the group ID)
or add the user to the group (right click New/User..)?
In the first case I see all users selecting People (but I don't know
about group), in the other case I select the group and I see all users.
2) is it possible to add people to more than one group?
Thanks
On 4/30/2014 8:51 AM, Enrico Morelli wrote:
> Dear all,
>
> I'm a new user about 389 DS. I installed it on a RHEL 6 (32bit)
> server: 89-admin-console-doc-1.1.8-1.el6.noarch
> 389-ds-1.2.2-1.el6.noarch
> 389-ds-base-1.2.11.15-32.el6_5.i686
> 389-ds-base-libs-1.2.11.15-32.el6_5.i686
> 389-ds-console-1.2.6-1.el6.noarch
> 389-admin-console-1.1.8-1.el6.noarch
> 389-dsgw-1.1.11-1.el6.i686
> 389-admin-1.1.35-1.el6.i686
> 389-adminutil-1.1.19-1.el6.i686
> 389-ds-console-doc-1.2.6-1.el6.noarch
> 389-console-1.1.7-1.el6.noarch
>
> I've troubles with groups. I created posix user and group. I'm able
> to login on the Linux client (SL 6 32bit) but I receive the error:
> cannot find name for group ID.
>
> I had search on google to find a solution, but all the suggestions
> I've find didn't work for me.
>
> This is the sssd.conf on the client, with all attempts to solve the
> problem
> -----------------------------------------------
> [domain/default]
> ldap_schema = rfc2307bis
> ldap_id_use_start_tls = True
> cache_credentials = True
> ldap_search_base = dc=mydomain,dc=it
> #krb5_realm =
EXAMPLE.COM
> #krb5_server =
kerberos.example.com
> id_provider = ldap
> auth_provider = ldap
> chpass_provider = ldap
> ldap_uri = ldaps://myserver
> ldap_tls_cacertdir = /etc/openldap/cacerts
> entry_cache_timeout = 600
> ldap_network_timeout = 3
> #ldap_group_name = uniqueMember
> ldap_group_object_class = groupofuniquenames
> [sssd]
> services = nss, pam
> config_file_version = 2
>
> domains = default
> -----------------------------------------------------------------
>
> If I add the member to the group through the management console
> group->Members->Static Group, switch on the ldap_group_name =
> uniqueMember parameter on the client, clear cache, restart sssd and
> type id user I obtain:
> uid=1001(morelli)
> gid=1001(uid=morelli,cn=students,ou=Groups,dc=mydoman,dc=it)
> groups=1001(uid=morelli,cn=students,ou=Groups,dc=mydomain,dc=it)
>
> There is a way to solve the problem?
> Thanks
--
-------------------------------------------------------------
Enrico Morelli
System Administrator | Programmer | Web Developer
CERM - Polo Scientifico
Via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
phone: +39 055 457 4269
fax: +39 055 457 4927
-------------------------------------------------------------