Pavel Březina wrote:
> But I'm struggling that groups are not correctly retrieved -
see my last
> attempt of sssd.conf attached.
>
> 1. After login id does not show the user's groups although the OpenLDAP logs
> show that group entries are searched and returned to sssd by OpenLDAP's slapd.
can you raise debug level in nss, sudo and domain section to 9 (put
debug_level = 9 in [nss], [sudo] and [domain/yourdomain] sections in
sssd.conf? What does the logs say?
It turned out to be a bug in our own Debian package.
The lib memberof.so was not found.
Now I'm still working on getting sudoers to work via sssd. But that's another
story...
Ciao, Michael.