On Mon, 2011-10-24 at 07:27 -0400, Gorkos, John wrote:
Ding Ding Ding! We have a winner!
Addint the "ldap_group_object_class" to my 1.5.14 sssd.conf did indeed
fix my nested groups problem:
# id alpha
uid=10001(alpha) gid=1000(users)
groups=1000(users),1001(fruits),1002(nuts)
It does not work on 1.5.1 (which we suspected/knew already), but I'm
comfortable pushing the newer RPMs to my management machine.
For the record, the fact that RHEL 6.2 identifies the version as SSSD
1.5.1 is a peculiarity of the RHEL process (which requires that you
start from a particular upstream version and then apply patches to fix
individual issues). However, the final release of RHEL 6.2 will be
functionally identical to 1.5.14 (or possibly 1.5.15 if we discover
urgent fixes before it ships).
I do encourage you to try the SSSD version in the 6.2 beta (and
ultimately final) which should provide you the same functionality and
keep you on an enterprise-supported version.