Hi List,

 

I have a strange problem. I have 2 machines on different locations, but running a same sssd version and configuration.

First one works fine, enumerates (via “id –a” command) all groups user belongs to.

Second does not enumerate groups for the same user, only shows the primary group.

 

Comparing the logs (same debug level):

1st machine (working one):

[sssd[be[default]]] [sdap_get_initgr_user] (0x4000): Process user's groups

[sssd[be[default]]] [sdap_initgr_rfc2307bis_next_base] (0x0400): Searching for parent groups for user [CN=Jan Kovalsky….

[sssd[be[default]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with …(ldap search filter here)

 

2nd machine (not working):

[sssd[be[default]]] [sdap_get_initgr_user] (0x4000): Process user's groups

[sssd[be[default]]] [sdap_id_op_connect_step] (0x4000): reusing cached connection

[sssd[be[default]]] [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with [no filter][CN=Jan Kovalsky…..

[sssd[be[default]]] [sdap_get_generic_ext_step] (0x1000): Requesting attrs: [tokenGroups]

 

Both machines starts with clear cache – seems like there must be some difference in AD servers they connect to?

Could you clarify?

 

Thanks,

 

Ondrej

-----

The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited (S3 Group). Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18.