Hi All.
It looks like I found another bug in sssd(latest git version).
As I wrote previously we are in proccess of migration from FDS v.1.2.3
to latest stable version and I see strange behaviour if group is a
member of another group and has the same member as parent one and
returns from ldap as second entry (first entry is user) then sssd
doesn't show the rest of memebers in parent group.
For example:
cn=GROUP1,ou=groups,dc=domain:
uniquemember: uid=user1,ou=users1,dc=domain
uniquemember: uid=user1,ou=users2,dc=domain
uniquemember: uid=user1,ou=users2,dc=domain
cn=GROUP2,ou=groups,dc=domain:
uniquemember: uid=user1,ou=users1,dc=domain
uniquemember: cn=GROUP1,ou=groups,dc=domain
In this case sssd never sets all users in GROUP1, except user1, as
members of GROUP2.
BUT, if we have
cn=GROUP1,ou=groups,dc=domain:
uniquemember: uid=user1,ou=users1,dc=domain
uniquemember: uid=user1,ou=users2,dc=domain
uniquemember: uid=user1,ou=users2,dc=domain
cn=GROUP2,ou=groups,dc=domain:
uniquemember: cn=GROUP1,ou=groups,dc=domain
uniquemember: uid=user1,ou=users1,dc=domain
Then everything is correct.
I'm still exploring this issue, but, as I'm not a developer of ssd, it
takes some time to understand all internal mechanisms. So maybe you
know about it already and have some steps to solve it.
Show replies by date