I try to reanimate this thread, hopefully someone will be willing to spare some time and
help with it. I have done some more tests, and it seems that override of AD users in sssd
2.2.3 does not work as expected. I do not know if it is a bug or works as expected, but as
I mentioned several times, with clean cache on the IPA server and client, the id of the
user is not resolved unless I manually run getent group <user_name>.
In the IPA client sssd_ipa.log
[ipa_s2n_exop_done] (0x0040): ldap_extended_operation result: No such object(32), (null).
In the IPA server sssd_nss.log I see the bellow error:
[nss_protocol_fill_initgr] (0x0080): Unable to find primary gid [2]: No such file or
directory
Did anyone experienced this or find a workaround for the problem ?