i am so close yet so far...
i have an older env with ldap, kerberos, sasl and sssd using rfc2307.
i built a new env with ldap, kerberos, sasl and sssd using rfc2307bis.
i am finding that when i ssh into one of the new boxes and run "id", i
am only getting back:
uid=1000(brendan) gid=1000(brendan) groups=1000(brendan)
the info is all the rfc2307/posix info, and not any of the rfc2307bis
info. i am a member of several other groups that are groupOfNames
objects, but the "id" command is not returning them.
is there a client side config that i am missing, in order to get the
group memberships of groupOfNames groups? i imagine i could add the
posixAccount object class to those groupOfNames groups, but wanted to
make sure that was the only/right way to do things before i did it.
i am not clueless, just have one clue less...
brendan