Well, one problem that I seem to have had was the smb.conf was not set up properly.  Once I got those settings fixed, things do seem better.

It's still not acting like I was expecting, but that's likely a problem with my expectations and not with SSSD.  I suspect I just need to read more about the cache and get some more fine tuning done.

For what it's worth, I was not able to compile the latest stable version (1.12.0).  I got the following error:
src/providers/ad/ad_gpo_child.c: In function ‘ad_gpo_parse_security_cse_buffer’:
src/providers/ad/ad_gpo_child.c:301:5: error: implicit declaration of function ‘ini_config_file_from_mem’ [-Werror=implicit-function-declaration]

Since I really need to just run whatever version is in the CentOS repo, I didn't spend too much time trying to solve that problem.  But, I'm happy to file a bug report or anything else that might be helpful if this is a problem with more than just my system.

Thanks,
Peter


--
Peter Kirby
System and Database Administrator @ Harding University


On Tue, Aug 19, 2014 at 9:55 AM, Peter Kirby <lpkirby@harding.edu> wrote:
Steve,  I have tried both ways just to be sure.

Lukas, Nope, not mine.


Since Steve's seems to be working, I think I'll try the latest stable version of SSSD and see if I have better luck.  I'll report back either way.

--
Peter Kirby
System and Database Administrator @ Harding University


On Tue, Aug 19, 2014 at 5:01 AM, Lukas Slebodnik <lslebodn@redhat.com> wrote:
On (18/08/14 14:38), Peter Kirby wrote:
>That's for the quick response.  Unfortunately, that's not the behavior I'm
>seeing.  Here's what I see:
>
>1) Log in as root, erase the cache, and restart SSSD.
>2) Log in as the user and try a "touch test" in a directory controlled by
>ACL.
>3) Get permission denied error.
>4) As the user (root does not have to do this) run: getent group test-group
>which shows the correct membership from Active Directory.
>5) Attempt another "touch test", still permission denied.
>6) Log out and then log back in.
>7) One more "touch test" and it works.
>
Is it also your case?
https://fedorahosted.org/sssd/ticket/2343

LS
_______________________________________________
sssd-users mailing list
sssd-users@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users