I'm experiencing an issue with SSSD 1.11.5 running on Ubuntu 12.04.5
LTS. It's using the AD provider, pointing to AD servers with POSIX
groups configured (ldap_id_mapping = False).
The issue I'm experiencing is that all of a user's groups vanishes from
"id" and "groups" after several hours (appears to be 8-12 hours),
for his/her login group.
sss_cache -E doesn't fix it
Restarting SSSD doesn't fix it.
However, stopping SSSD, removing /var/lib/sss/db/*, and restarting SSSD
does fix it.
After manually removing the cache files in the DB dir, SSSD will then
see all of a users groups until several hours pass, then, again, all but
his login group will vanish until the files are removed and SSSD
Is this a known issue, perhaps a bug fixed in some future version?
BTW, if you're wondering, the SSSD version I'm using is a backport of
1.11.5 found here in this PPA:
This is how I'm able to use the AD provider with Ubuntu 12. I know it's
not supported, etc. I'm just looking for any insights or suggestions,
or whether a known bug exists for this version that exhibits this
"vanishing groups" behavior.