Hi all.
Just installed Fedora and I am trying to setup authentication
with our LDAP server. I followed the convenient authentication
installation instructions (I am using TLS / no SASL). Unfortunately authentication
was not working, so I decided to see if get first get nsswitch going and found
about your sssd daemon. Any way here are the pertinent lines from from nsswitch.conf
passwd: files sss
shadow: files sss
group: files sss
The command
getent passwd cochran
did not work until I tweaked the sssd.conf file (sort of guessing here);
Here are the tweeks
domains = LDAP
#domains = LOCAL,LDAP
[domain/LDAP]
id_provider = ldap
auth_provider = ldap
ldap_uri =
ldap://encs-nexus.vancouver.wsu.edu
ldap_user_search_base = dc=encs,dc=vancouver,dc=wsu,dc=edu
ldap_tls_reqcert = demand
cache_credentials = true
enumerate = true
Now the following works (it gets the correct info from LDAP):
getent passwd cochran
cochran:*:10001:10099::/home/cochran:/bin/bash
but alas the command
getent group faculty
does *not* work
Running sssd in debug mode
usr/sbin/sssd -i -d 5
reveals the following
(Thu Aug 5 09:41:49 2010) [sssd[nss]] [accept_fd_handler] (4): Client connected!
(Thu Aug 5 09:41:49 2010) [sssd[nss]] [sss_cmd_get_version] (5): Received client version
[1].
(Thu Aug 5 09:41:49 2010) [sssd[nss]] [sss_cmd_get_version] (5): Offered version [1].
(Thu Aug 5 09:41:49 2010) [sssd[nss]] [nss_cmd_getgrnam] (4): Requesting info for
[faculty] from [<ALL>]
(Thu Aug 5 09:41:49 2010) [sssd[nss]] [nss_cmd_getgrnam] (4): Requesting info for
[faculty@LDAP]
(Thu Aug 5 09:41:49 2010) [sssd[nss]] [sss_dp_send_acct_req_create] (4): Sending request
for [LDAP][4098][1][name=faculty]
(Thu Aug 5 09:41:49 2010) [sssd[be[LDAP]]] [be_get_account_info] (4): Got request for
[4098][1][name=faculty]
(Thu Aug 5 09:41:49 2010) [sssd[be[LDAP]]] [groups_get_delete] (2): Group (faculty)
delete returned 2 (No such file or directory)
(Thu Aug 5 09:41:49 2010) [sssd[be[LDAP]]] [acctinfo_callback] (4): Request processed.
Returned 0,0,Success
(Thu Aug 5 09:41:49 2010) [sssd[nss]] [sss_dp_get_reply] (4): Got reply (0, 0, Success)
from Data Provider
(Thu Aug 5 09:41:49 2010) [sssd[nss]] [nss_cmd_getgrnam_callback] (2): No matching domain
found for [faculty], fail!
(Thu Aug 5 09:41:49 2010) [sssd[nss]] [nss_cmd_getgrnam_callback] (2): No results for
getgrnam call
(Thu Aug 5 09:41:49 2010) [sssd[nss]] [client_recv] (5): Client disconnected!
I have not clue what to change now.
Any help would be greatly appreciated.
I am not a hard core sysadmin (budget cuts have me setting this up myself).
--w
Wayne O. Cochran
Assistant Professor Computer Science
wcochran(a)vancouver.wsu.edu