[SSSD] sssd nested groups and users.

Sergei V. Kovylov serejka at gmail.com
Sat Mar 5 09:10:07 UTC 2011


Hi Jakub.
Yes, but I need  first of all  to modify sources to make originalDN be
case-insensitive. Maybe the problem is because of later modification
of ldb cache. I will make some experiments and let you know.

2011/3/4 Jakub Hrozek <jhrozek at redhat.com>:
>>>> Let me rephrase the use case:
>>>> 1) There is a Group1 that has users u1,u2,u3,...
>>>> 2) There is a Group2 that has users u1,...
>>>> 3) Group2 is nested into Group1
>>>> 4) Issue: if while processing Group 1 the nested group Group 2 not
>>>> processed first (before other users) then users from Group 2 are not
>>>> seen. If the Group 2 happens to be processed before other users in Group
>>>> 1 then all members of Group 1 are shown correctly.
>>>>
>>>> Right?
>>>>
>>>> --
>>>> Thank you,
>>>> Dmitri Pal
>>>>
>> Yes that's right.
>
> Hi, I tried setting up a similar scenario with RFC2307bis LDAP server
> and could not reproduce the problem. Both getent group calls return all
> three users for me.
>
> Can you add "debug_level = 9" into your /etc/sssd/sssd.conf, re-running
> your tests with cache removed (rm -f /var/lib/sss/db/cache_$domain.ldb)
> and sending your logs?
>
> Thank you,
>        Jakub
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel
>



More information about the sssd-devel mailing list