Well, one problem that I seem to have had was the smb.conf was not set up properly. Once I got those settings fixed, things do seem better.
It's still not acting like I was expecting, but that's likely a problem with my expectations and not with SSSD. I suspect I just need to read more about the cache and get some more fine tuning done.
For what it's worth, I was not able to compile the latest stable version (1.12.0). I got the following error:src/providers/ad/ad_gpo_child.c: In function ‘ad_gpo_parse_security_cse_buffer’:src/providers/ad/ad_gpo_child.c:301:5: error: implicit declaration of function ‘ini_config_file_from_mem’ [-Werror=implicit-function-declaration]
Since I really need to just run whatever version is in the CentOS repo, I didn't spend too much time trying to solve that problem. But, I'm happy to file a bug report or anything else that might be helpful if this is a problem with more than just my system.
Thanks,Peter
--Peter Kirby
System and Database Administrator @ Harding University
On Tue, Aug 19, 2014 at 9:55 AM, Peter Kirby <lpkirby@harding.edu> wrote:
Steve, I have tried both ways just to be sure.
Lukas, Nope, not mine.
Since Steve's seems to be working, I think I'll try the latest stable version of SSSD and see if I have better luck. I'll report back either way.
--Peter Kirby
System and Database Administrator @ Harding University
On Tue, Aug 19, 2014 at 5:01 AM, Lukas Slebodnik <lslebodn@redhat.com> wrote:
On (18/08/14 14:38), Peter Kirby wrote:Is it also your case?
>That's for the quick response. Unfortunately, that's not the behavior I'm
>seeing. Here's what I see:
>
>1) Log in as root, erase the cache, and restart SSSD.
>2) Log in as the user and try a "touch test" in a directory controlled by
>ACL.
>3) Get permission denied error.
>4) As the user (root does not have to do this) run: getent group test-group
>which shows the correct membership from Active Directory.
>5) Attempt another "touch test", still permission denied.
>6) Log out and then log back in.
>7) One more "touch test" and it works.
>
https://fedorahosted.org/sssd/ticket/2343
LS
_______________________________________________
sssd-users mailing list
sssd-users@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users
_______________________________________________ sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-users
-- Thank you, Dmitri Pal Sr. Engineering Manager IdM portfolio Red Hat, Inc.