[SSSD] [PATCHES] Support native IPA netgroups

JR Aquino JR.Aquino at citrix.com
Thu Dec 8 17:27:44 UTC 2011


On Dec 8, 2011, at 12:04 AM, Jan Zelený wrote:

>>> I'm sending updated set of patches. All your comments were addressed, I
>>> also added man page updates and one modification to
>>> sdap_parse_search_base() which can be now used for at more places in IPA
>>> provider.
>>> 
>>> 
>>> Thanks
>>> Jan
>> 
>> I am unable to get sssd to turn any netgroup over with: getent netgroup
>> <netgroupname>
>> 
>> When I do a tcpdump, I don't see any attempt at communicating with the IPA
>> server at all.
>> 
>> Am I missing some initiation value in the sssd.conf?
> 
> That's odd, could you please send your config file and sanitized logs?
> 
> Thanks
> Jan

[sssd]
services = nss, pam
config_file_version = 2
domains = example.com

[nss]

[pam]

[domain/expertcity.com]
cache_credentials = True
ipa_domain = example.com
id_provider = ipa
auth_provider = ipa
access_provider = ipa
ipa_hostname = opsecutil1.example.com
chpass_provider = ipa
ipa_server = authmgr1.example.com
ldap_netgroup_search_base = cn=ng,cn=compat,dc=example,dc=com
ipa_hbac_refresh = 300

this is all that i get out of /var/log/sssd/sssd_nss.log with debug_level 8 when i tail -f and do a getent netgroup name:

(Wed Dec  7 10:40:14 2011) [sssd[nss]] [sss_cmd_get_version] (0x0200): Received client version [1].
(Wed Dec  7 10:40:14 2011) [sssd[nss]] [sss_cmd_get_version] (0x0200): Offered version [1].
(Wed Dec  7 10:40:14 2011) [sssd[nss]] [client_recv] (0x0200): Client disconnected!
(Wed Dec  7 10:40:14 2011) [sssd[nss]] [accept_fd_handler] (0x0100): Client connected!
(Wed Dec  7 10:40:14 2011) [sssd[nss]] [sss_cmd_get_version] (0x0200): Received client version [1].
(Wed Dec  7 10:40:14 2011) [sssd[nss]] [sss_cmd_get_version] (0x0200): Offered version [1].
(Wed Dec  7 10:40:14 2011) [sssd[nss]] [client_recv] (0x0200): Client disconnected!
(Wed Dec  7 10:40:54 2011) [sssd[nss]] [accept_fd_handler] (0x0100): Client connected!
(Wed Dec  7 10:40:54 2011) [sssd[nss]] [sss_cmd_get_version] (0x0200): Received client version [1].
(Wed Dec  7 10:40:54 2011) [sssd[nss]] [sss_cmd_get_version] (0x0200): Offered version [1].
(Wed Dec  7 10:40:54 2011) [sssd[nss]] [client_recv] (0x0200): Client disconnected!
(Wed Dec  7 10:40:54 2011) [sssd[nss]] [accept_fd_handler] (0x0100): Client connected!
(Wed Dec  7 10:40:54 2011) [sssd[nss]] [sss_cmd_get_version] (0x0200): Received client version [1].
(Wed Dec  7 10:40:54 2011) [sssd[nss]] [sss_cmd_get_version] (0x0200): Offered version [1].
(Wed Dec  7 10:40:54 2011) [sssd[nss]] [client_recv] (0x0200): Client disconnected!


More information about the sssd-devel mailing list