On Monday, October 24, 2011 12:30:40 PM Stephen Gallagher wrote:
On Mon, 2011-10-24 at 07:27 -0400, Gorkos, John wrote:
> Ding Ding Ding! We have a winner!
> Addint the "ldap_group_object_class" to my 1.5.14 sssd.conf did indeed
> fix my nested groups problem:
> # id alpha
> uid=10001(alpha) gid=1000(users)
> groups=1000(users),1001(fruits),1002(nuts)
>
> It does not work on 1.5.1 (which we suspected/knew already), but I'm
> comfortable pushing the newer RPMs to my management machine.
For the record, the fact that RHEL 6.2 identifies the version as SSSD
1.5.1 is a peculiarity of the RHEL process (which requires that you
start from a particular upstream version and then apply patches to fix
individual issues). However, the final release of RHEL 6.2 will be
functionally identical to 1.5.14 (or possibly 1.5.15 if we discover
urgent fixes before it ships).
I do encourage you to try the SSSD version in the 6.2 beta (and
ultimately final) which should provide you the same functionality and
keep you on an enterprise-supported version.
We're pulling the 6.2Beta repo now for our 6.x systems. Is there any hope for
a backport of the 1.5.9+ tree to RHEL5, since the majority of my systems are
5.3 and 5.5 (upgrading is blocked by our s/w development group).
John Gorkos