I'll have to get back to you tomorrow on the version, but it's RHEL 7.4.
One server started working after flushing the cache a million times and
restarting sssd a couple hundred. The other server I believe is showing
even less groups.
I feel like we've had these issues a few times very randomly. And nothing I
do necessarily fixes it per se.
On Mon, Apr 23, 2018, 6:29 PM Lachlan Musicman <datakid(a)gmail.com> wrote:
On 24 April 2018 at 03:01, Max DiOrio <mdiorio(a)gmail.com>
wrote:
> So we are having issues with a couple servers where users suddenly won't
> be able to log in. All our auth is done through AD and not a thing has
> changed.
>
> On a working server, I can do 'id username' and get back the proper list
> of groups the user is a member of.
>
> On the non-working server, 'id username' returns *mostly* the same list.
> However the one group that the user needs to be a member to log in is
> missing.
>
> There are some groups in both lists that that have a group ID, but not a
> group name. And the one non-working server has a single group entry
> duplicated. The results of 'id username' match throughout, except the
> noted areas below and a few entries that are listed out of order between
> the two.
>
> Here are the differences "non-working" on top, "working" on
bottom
> (gs-technology is the group in question that I need on the non-working
> server). It doesn't make sense that 1002201991 is showing up twice in the
> list.
>
> 1002201991
> 1002201991(fs01-technology-all(rw))
> 1002201620(infrastructureteam)
> 1002201620
>
> 1002201991
> 1002204761(gs-technology)
>
> Thanks!
>
>
>
Max, Which version of SSSD are you using, and which OS?
Cheers
L.
_______________________________________________
sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org