Thanks for the hints Stephen, I got it working now.
Two problems,
1. Attributes were wrong as you stated, changed them to the correct ones.
2. We have uids/gids under 1000 which was filtered out by sssd, i saw
that in
the last log when you asked for it.
So i think I'll manage from here, anyway thanks again for the great
support.
/Patrik Martinsson, Sweden.
On 07/29/2010 02:08 PM, Stephen Gallagher wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 07/29/2010 08:01 AM, Patrik Martinsson wrote:
> Thanks for a quick answer !
>
> To answer your questions,
> 1. No, i dont have those attributes msSFU30UidNumber/msSFU30GidNumber.
> However, i have uidNumber and gidNumber.
>
> 2. Hmm, i though we were running AD 2003R2 with SFU, but I'm a bit
> uncertain.
> Winsysman is on vacation so i cant really check with him either.
>
> Hmm, in ldap.conf we've set these mappings, if that could help.
> nss_map_objectclass posixAccount User
> nss_map_attribute uid sAMAccountName
> nss_map_attribute uniqueMember member
> nss_map_attribute homeDirectory msSFUHomeDirectory
> nss_map_objectclass posixGroup Group
>
> I thought that as long as i got the ldap_search right, which seems to
> be, calling ldap_search_ext with
> [(&(cn=xx)(objectclass=person))][ou=People,dc=xx,dc=xx,dc=xx],
> i would get some results out of it, even if the some attributes are
> wrong, but maybe I'm mistaken.
>
> I just tried changing to this in sssd.conf, but that didn't matter, same
> result.
> ldap_user_uid_number = uidNumber
> ldap_user_gid_number = gidNumber
>
> Any suggestions on how to proceed ?
>
Would you mind attaching your [sanitized] log with these new attributes?
I assume you're hitting a different error now. (Since the effective
error you were hitting the first time was
[sdap_save_user_send] (1): no uid provided for [xx] in domain [FOO]"
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Fedora -
http://enigmail.mozdev.org/
iEYEARECAAYFAkxRbzMACgkQeiVVYja6o6OYVQCfZwjldFzP4h16/PD23SxRL24w
ZZYAn1POe5m8PyavOZQrdHmOvE1pLzuS
=uVm6
-----END PGP SIGNATURE-----
_______________________________________________
sssd-devel mailing list
sssd-devel(a)lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/sssd-devel