[SSSD] uid with @(at) sign

Stefan Lesicnik stefan at lsd.co.za
Mon Dec 5 10:57:33 UTC 2011


Hi,

I'm hoping someone can help. I am using RHEL 6.1 and trying to use sssd to authenticate to our ldap server.

Our ldap server uses the uid=name at domain as the uid. sssd seems to pass the name part only. Below is the extract from log.
This is generated by running getent passwd stefan at lsd.com

Originally I had the issue where the @ part of the search was looking for a specific sssd provider. I changed my domain to lsd.com. This lets me search but as you can see below, passes the filter of uid=stefan and not uid=stefan at lsd.com

Thanks in advance,
Stefan


==> slapd trace
Dec  5 12:51:58 ecstasy slapd[15262]: conn=1327 op=4 SRCH base="ou=lsd,ou=users,dc=lsd,dc=co,dc=za" scope=2 deref=0 filter="(&(uid=stefan)(objectClass=posixAccount))" 
Dec  5 12:51:58 ecstasy slapd[15262]: conn=1327 op=4 SRCH attr=objectClass uid userPassword uidNumber gidNumber gecos homeDirectory loginShell krbPrincipalName cn modifyTimestamp modifyTimestamp shadowLastChange shadowMin shadowMax shadowWarning shadowInactive shadowExpire shadowFlag krbLastPwdChange krbPasswordExpiration pwdAttribute authorizedService accountExpires userAccountControl nsAccountLock 


==> sssd_nss.log <==
(Mon Dec  5 12:55:40 2011) [sssd[nss]] [accept_fd_handler] (4): Client connected!
(Mon Dec  5 12:55:40 2011) [sssd[nss]] [sss_cmd_get_version] (5): Received client version [1].
(Mon Dec  5 12:55:40 2011) [sssd[nss]] [sss_cmd_get_version] (5): Offered version [1].
(Mon Dec  5 12:55:40 2011) [sssd[nss]] [nss_cmd_getpwnam] (4): Requesting info for [stefan] from [lsd.com]
(Mon Dec  5 12:55:40 2011) [sssd[nss]] [nss_cmd_getpwnam_search] (4): Requesting info for [stefan at lsd.com]
(Mon Dec  5 12:55:40 2011) [sssd[nss]] [sss_dp_send_acct_req_create] (4): Sending request for [lsd.com][4097][1][name=stefan]

==> sssd_lsd.com.log <==
(Mon Dec  5 12:55:40 2011) [sssd[be[lsd.com]]] [be_get_account_info] (4): Got request for [4097][1][name=stefan]
(Mon Dec  5 12:55:40 2011) [sssd[be[lsd.com]]] [acctinfo_callback] (4): Request processed. Returned 0,0,Success

==> sssd_nss.log <==
(Mon Dec  5 12:55:40 2011) [sssd[nss]] [sss_dp_get_reply] (4): Got reply (0, 0, Success) from Data Provider
(Mon Dec  5 12:55:40 2011) [sssd[nss]] [nss_cmd_getpwnam_search] (4): Requesting info for [stefan at lsd.com]

==> sssd_lsd.com.log <==

==> sssd_nss.log <==
(Mon Dec  5 12:55:40 2011) [sssd[nss]] [nss_cmd_getpwnam_search] (2): No results for getpwnam call
(Mon Dec  5 12:55:40 2011) [sssd[nss]] [client_recv] (5): Client disconnected!



More information about the sssd-devel mailing list