Nope,
See the last sentence:
"When connected to Active-Directory Server 2008 and later it is furthermore required
to disable usage of
Token-Groups by setting ldap_use_tokengroups to false"
I understand it the way that if you have a newer DC, you need to disable tokengroups
usage.
Ondrej
-----Original Message-----
From: sssd-users-bounces(a)lists.fedorahosted.org
[mailto:sssd-users-bounces@lists.fedorahosted.org] On Behalf Of John Hodrien
Sent: 18 September 2015 11:08
To: End-user discussions about the System Security Services Daemon
<sssd-users(a)lists.fedorahosted.org>
Subject: Re: [SSSD-users] Tokengroups usage
On Fri, 18 Sep 2015, Ondrej Valousek wrote:
Hi List,
Man sssd-ldap says:
"
If ldap_group_nesting_level is set to 0 then no nested groups are
processed at all. However, when connected to Active-Directory Server
2008 and later it is furthermore required to disable usage of
Token-Groups by setting ldap_use_tokengroups to false.
"
Why is usage of tokengroups not possible with Windows server 2008 or newer?
Can someone clarify?
That's not what it means. If you have tokengroups enabled, you get fully nested group
handling as a result.
If you want to disable nested group handling, you have do disable both tokengroups and set
ldap_group_nesting_level to 0.
jh
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users
-----
The information contained in this e-mail and in any attachments is confidential and is
designated solely for the attention of the intended recipient(s). If you are not an
intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or
any part thereof. If you have received this e-mail in error, please notify the sender by
return e-mail and delete all copies of this e-mail from your computer system(s). Please
direct any additional queries to: communications(a)s3group.com. Thank You. Silicon and
Software Systems Limited (S3 Group). Registered in Ireland no. 378073. Registered Office:
South County Business Park, Leopardstown, Dublin 18.