Hi Jakub.
Yes, but I need first of all to modify sources to make originalDN be
case-insensitive. Maybe the problem is because of later modification
of ldb cache. I will make some experiments and let you know.
2011/3/4 Jakub Hrozek <jhrozek(a)redhat.com>:
>>> Let me rephrase the use case:
>>> 1) There is a Group1 that has users u1,u2,u3,...
>>> 2) There is a Group2 that has users u1,...
>>> 3) Group2 is nested into Group1
>>> 4) Issue: if while processing Group 1 the nested group Group 2 not
>>> processed first (before other users) then users from Group 2 are not
>>> seen. If the Group 2 happens to be processed before other users in Group
>>> 1 then all members of Group 1 are shown correctly.
>>>
>>> Right?
>>>
>>> --
>>> Thank you,
>>> Dmitri Pal
>>>
> Yes that's right.
Hi, I tried setting up a similar scenario with RFC2307bis LDAP server
and could not reproduce the problem. Both getent group calls return all
three users for me.
Can you add "debug_level = 9" into your /etc/sssd/sssd.conf, re-running
your tests with cache removed (rm -f /var/lib/sss/db/cache_$domain.ldb)
and sending your logs?
Thank you,
Jakub
_______________________________________________
sssd-devel mailing list
sssd-devel(a)lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/sssd-devel