[SSSD] SSSD Configuration issue

Nitesh Mehare nitesh26 at gmail.com
Fri Nov 11 08:36:45 UTC 2011


Jakub,

The group entry looks like this

cn=idsldap,ou=People,o=sample
cn=idsldap
objectclass=posixgroup
objectclass=top
gidnumber=201
memberuid=nitpta2
memberuid=nitinst
memberuid=nitinst1
memberuid=nitback1

The group entry is under ou=people and any user is made member of a group
by adding the memberuid attribute so i have kept ldap_schema as rfc2307

Thanks

On Fri, Nov 11, 2011 at 1:57 PM, Jakub Hrozek <jhrozek at redhat.com> wrote:

> On Fri, Nov 11, 2011 at 12:02:31PM +0530, Nitesh Mehare wrote:
> >    # data about the user itself. If you do not know this value, ask an
> >    # administrator.
> >    A [domain/LDAP]
> >    A debug_level = 9
> >    A id_provider = ldap
> >    A auth_provider = ldap
> >    A ldap_schema = rfc2307
> >    A access_provider = ldap
> >    A ldap_access_filter = memberOf=cn=idsldap,ou=People,o=sample
> >    A ldap_uri = ldap://lbullet.in.ibm.com
> >    A ldap_search_base = ou=People,o=sample
> >    A ldap_tls_reqcert = never
> >    A cache_credentials = false
> >    A enumerate = False
>
> How are group membership links determined in your directory?
>
> If you're using member/memberof pairs as your ldap_access_filter
> suggests, you should probably use "ldap_schema = rfc2307bis".
>
> The configuration specifies "schema=rfc2307" which implies
> "memberuid" attributes with username values.
>
> Also, the search base points to "ou=People" container, is it really
> where the groups are stored as well?
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20111111/7137867a/attachment.html>


More information about the sssd-devel mailing list