On 08/20/2014 10:24 PM, Peter Kirby wrote:
Well, one problem that I seem to have had was the smb.conf was not
set
up properly. Once I got those settings fixed, things do seem better.
It's still not acting like I was expecting, but that's likely a
problem with my expectations and not with SSSD. I suspect I just need
to read more about the cache and get some more fine tuning done.
For what it's worth, I was not able to compile the latest stable
version (1.12.0). I got the following error:
src/providers/ad/ad_gpo_child.c: In function
‘ad_gpo_parse_security_cse_buffer’:
src/providers/ad/ad_gpo_child.c:301:5: error: implicit declaration of
function ‘ini_config_file_from_mem’
[-Werror=implicit-function-declaration]
Since I really need to just run whatever version is in the CentOS
repo, I didn't spend too much time trying to solve that problem. But,
I'm happy to file a bug report or anything else that might be helpful
if this is a problem with more than just my system.
You need the latest ding-libs package.
Build that first.
Thanks,
Peter
--
Peter Kirby
System and Database Administrator @ Harding University
On Tue, Aug 19, 2014 at 9:55 AM, Peter Kirby <lpkirby(a)harding.edu
<mailto:lpkirby@harding.edu>> wrote:
Steve, I have tried both ways just to be sure.
Lukas, Nope, not mine.
Since Steve's seems to be working, I think I'll try the latest
stable version of SSSD and see if I have better luck. I'll report
back either way.
--
Peter Kirby
System and Database Administrator @ Harding University
On Tue, Aug 19, 2014 at 5:01 AM, Lukas Slebodnik
<lslebodn(a)redhat.com <mailto:lslebodn@redhat.com>> wrote:
On (18/08/14 14:38), Peter Kirby wrote:
>That's for the quick response. Unfortunately, that's not the
behavior I'm
>seeing. Here's what I see:
>
>1) Log in as root, erase the cache, and restart SSSD.
>2) Log in as the user and try a "touch test" in a directory
controlled by
>ACL.
>3) Get permission denied error.
>4) As the user (root does not have to do this) run: getent
group test-group
>which shows the correct membership from Active Directory.
>5) Attempt another "touch test", still permission denied.
>6) Log out and then log back in.
>7) One more "touch test" and it works.
>
Is it also your case?
https://fedorahosted.org/sssd/ticket/2343
LS
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
<mailto:sssd-users@lists.fedorahosted.org>
https://lists.fedorahosted.org/mailman/listinfo/sssd-users
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users
--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.