URL:
https://github.com/SSSD/sssd/pull/905
Title: #905: Don't ignore host entries in Group Policy security filters
dmulder commented:
"""
Probably because the computure object has `name=MASTER` instead of
`name=master.client.vm`. However this is after fresh enrollment to AD via `realm` command
so we need to be looking for the correct name here. Perhaps we can do base search on
`state->target_dn` which is `target_dn = 0x219dc70
"CN=MASTER,CN=Computers,DC=ad,DC=vm"`.
I wonder why did this search work for you?
Here's the entry on my test machine:
dn: name=dmm-sssd-test,cn=computers,cn=custom,cn=toady.suse.de,cn=sysdb
name: dmm-sssd-test
objectCategory: computer
objectSIDString: S-1-5-21-1898687337-2196588786-2775055786-1103
objectClass: computer
createTimestamp: 1572970904
distinguishedName: name=dmm-sssd-test,cn=computers,cn=custom,cn=toady.suse.de,
cn=sysdb
So, my computer name matched the cn, that's why it didn't fail for me.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/905#issuecomment-573108501