On Mon, 2010-05-31 at 13:18 +0200, Jakub Hrozek wrote:
Can you check that the query that is returned really comes from the
nss_sss module and not nss_ldap by running "getent passwd -s sss
$username"? You had both ldap and sss specified in your
/etc/nsswitch.conf sent earlier.
I removed the ldap entries, so it's just files, sss, and db
in /etc/nsswitch.conf. No change so far.
The debug output should give us some clue - anything unusual there?
The request for username should appear in the debug output ("Requesting
info for [$username@LDAP]"), then, unless the user is already cached, an
LDAP search is made ("calling ldap_search_ext with [(&(uid=$username).."
- - this message is debug level 6, though).
There is no such message when checking sssd -i -d8. So it looks like
sssd never gets contacted by the resolver :(