I have sssd 1.11.6 installed and without ldap_id_mapping=false everything works great.

 

If I want to use POSIX attributes and I do sssd fails:

 

(Thu Feb 12 12:46:27 2015) [sssd[be[corp.clima-tech.com]]] [load_backend_module] (0x0010): Error (5) in module (ad) initialization (sssm_ad_id_init)!

(Thu Feb 12 12:46:27 2015) [sssd[be[corp.clima-tech.com]]] [be_process_init] (0x0010): fatal error initializing data providers

(Thu Feb 12 12:46:27 2015) [sssd[be[corp.clima-tech.com]]] [main] (0x0010): Could not initialize backend [5]

 

[sssd]

services = nss, pam

config_file_version = 2

domains = corp.clima-tech.com

 

[nss]

 

[pam]

 

[domain/corp.clima-tech.com]

# Using id_provider=ad sets the best defaults on its own

id_provider = ad

# In sssd, the default access provider is always 'permit'. The AD access

# provider by default checks for account expiration

access_provider = ad

 

# Uncomment to use POSIX attributes on the server

ldap_id_mapping=False

 

# location of the keytab

krb5_keytab=/etc/krb5.sssd.keytab

 

#ldap_referrals = false

 

Wbinfo properly returns the posix attributes.

 

 

Wayne Andersen