[SSSD] SSSD Configuration issue
Jakub Hrozek
jhrozek at redhat.com
Fri Nov 11 08:27:16 UTC 2011
On Fri, Nov 11, 2011 at 12:02:31PM +0530, Nitesh Mehare wrote:
> # data about the user itself. If you do not know this value, ask an
> # administrator.
> A [domain/LDAP]
> A debug_level = 9
> A id_provider = ldap
> A auth_provider = ldap
> A ldap_schema = rfc2307
> A access_provider = ldap
> A ldap_access_filter = memberOf=cn=idsldap,ou=People,o=sample
> A ldap_uri = ldap://lbullet.in.ibm.com
> A ldap_search_base = ou=People,o=sample
> A ldap_tls_reqcert = never
> A cache_credentials = false
> A enumerate = False
How are group membership links determined in your directory?
If you're using member/memberof pairs as your ldap_access_filter
suggests, you should probably use "ldap_schema = rfc2307bis".
The configuration specifies "schema=rfc2307" which implies
"memberuid" attributes with username values.
Also, the search base points to "ou=People" container, is it really
where the groups are stored as well?
More information about the sssd-devel
mailing list