Hi guys,
Weird problem here. Running Ubuntu with SSSD 1.9.5.
Upon login after a long period between consecutive logins by the same user,
I receive the following error message:
groups: cannot find name for group ID 1596003661
`id` yields this:
USER@smarty:~$ id
uid=1596001141(USER) gid=1596000513(domain users) groups=1596000513(domain
users),1596001142(radioworksusers),1596001642(nixdesktopusers),1596001643(nixserverusers),1596003180(puppetmakers),1596003206(drupal_admin),1596003661
An immediate subsequent login on the same system by the same user fails to
produce the error message and the phantom group disappears from `id` output:
USER@smarty:~$ id
uid=1596001141(USER) gid=1596000513(domain users) groups=1596000513(domain
users),1596001142(radioworksusers),1596001642(nixdesktopusers),1596001643(nixserverusers),1596003180(puppetmakers),1596003206(drupal_admin)
I've also just noticed that the group ID reported is not consistent but can
vary. I've searched my AD server for a group objectSID in question but have
not found one; the group does not exist.
There seem to be no negative side effects aside from the error message and
unmapped GID in the output of the `id` command.
My config:
[sssd]
config_file_version = 2
debug_level = 0
reconnection_retries = 3
sbus_timeout = 30
services = nss, pam
domains = DOMAIN
[pam]
debug_level = 0
[nss]
debug_level = 0
filter_users =
root,ldap,named,avahi,haldaemon,dbus,radvd,tomcat,radiusd,news,mailman,nscd,gdm
filter_groups =
root,ldap,named,avahi,haldaemon,dbus,radvd,tomcat,radiusd,news,mailman,nscd,gdm
reconnection_retries = 3
default_shell = /bin/bash
shell_fallback = /bin/bash
[domain/DOMAIN]
debug_level = 0
ad_domain = DOMAIN.local
id_provider = ad
auth_provider = ad
chpass_provider = ad
access_provider = ad
enumerate = true
cache_credentials = true
# Will check unixHomeDirectory LDAP attribute for a value first
fallback_homedir = /home/%u
dyndns_update = true
dyndns_update_ptr = true
ldap_schema = ad
ldap_id_mapping = true
default_shell = /bin/bash
Thanks!
-Chris