On Mon, Apr 2, 2018 at 12:20 PM, Asif Iqbal <vadud3@gmail.com> wrote:


On Tue, Mar 27, 2018 at 4:43 AM, Sumit Bose <sbose@redhat.com> wrote:
On Fri, Mar 23, 2018 at 06:13:39PM -0400, Asif Iqbal wrote:
> On Thu, Mar 22, 2018 at 2:51 PM, Asif Iqbal <vadud3@gmail.com> wrote:
>
> > > [..stripped for brevity..]
> >>> > > > So I see 5% of current users have mnetid with leading 0.
> >>> > > >
> >>> > > > So I never used sss_override. How do I use sss_override to make
> >>> mnetid
> >>> > > > 004311
> >>> > > > to work with sss when ldap id mapping tries to map 4311 instead?
> >>> > > >
> >>> > > > Appreciate your help!
> >>> > >
> >>> > > I haven't tested it with your setup but
> >>> > >
> >>> > >     sss_override user_add mwvande --uid 4311 --gid 4311
> >>> > >     sss_override group_add mwvande --gid 4311
> >>> > >
> >>> > > should create the needed override data so that user and group mwvande
> >>> > > can be looked up with the ID 4311.
> >>> > >
> >>> >
> >>> >
> >>> > So I can lookup by 4311 after this. Very nice!
> >>> >
> >>> > Do I need to restart sssd after these two commands?
> >>>
> >>> You have to restart SSSD after adding the first overrides to switch on
> >>> the override handling. If you add additional override later on you do
> >>> not have to restart SSSD, but you might need to wait until some cache
> >>> timeouts are passed before the overridden values are shown.
> >>>
> >>
> >>
> >> I have a user today complained whose mnetid has leading 0s
> >>
> >> [mwvande@example:]$ ssh sgx2-brdr-01
> >>
> >> No user exists for uid 4311
> >>
> >> I already have the sss_override ran last week for 100 users last week and
> >> sssd was restarted.
> >>
> >>
> >>
> >>
> > I am still wondering if there is a gap in my using sss_override
> >
> > I have ran this, example commands, for all users with leading 0s in mnetid
> >
> >    sss_override user-add mwvande --uid 4311--gid 4311
> >    sss_override group-add mwvande --gid 4311
> >
> > Then I ran the systemctl restart sssd

As said earlier I haven't tested overrides with your type of setup, so
I'm not sure if they work as expected. After adding the overrides and
restarting SSSD with debug_level=9 in the [nss] and [domain/...]
sections of sssd.conf, can you call 'sss_cache -E' and 'getent passwd
4311' and send me the related logs.

bye,
Sumit


# sss_cache -E
# getent passwd 4311 
(no output)



Appreciate your help!



Hi Sumit et al.,

Still like some help to resolve this.

 
--
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?




--
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?