[SSSD] getent passwd works with LDAP but *not* getent group

Stephen Gallagher sgallagh at redhat.com
Fri Aug 6 18:51:38 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/06/2010 12:47 PM, Cochran, Wayne Owen wrote:
> Hi all.
> 
> Just installed Fedora and I am trying to setup authentication
> with our LDAP server. I followed the convenient authentication
> installation instructions (I am using TLS / no SASL). Unfortunately
> authentication
> was not working, so I decided to see if get first get nsswitch going and
> found
> about your sssd daemon. Any way here are the pertinent lines from from
> nsswitch.conf
> 

Wayne, my first recommendation would be for you to use authconfig to set
up SSSD. If you start authconfig-gtk on Fedora 13 and set it to use LDAP
for the User Account Database and also for the Authentication method,
this should get you most of the way.

If that doesn't work, please add debug_level=9 to your
/etc/sssd/sssd.conf file in the [domain/LDAP] section, run your test,
and then attach /var/log/sssd/sssd_LDAP.log to your reply so we can take
a look.


Also, looking at your config, I think you want to change
ldap_user_search_base to ldap_search_base. Since you don't have the
option ldap_group_search_base anywhere, I presume you meant for them to
be the same.

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkxcWbkACgkQeiVVYja6o6OWAgCfRTnlrWro9k+Ir3Mf7gsqgfXj
iYoAn3qi+3mIVW5CN6SINmPtea2ypEPp
=HUc2
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list