[SSSD] Fruits and Nuts (or, need help with nested LDAP groups)

Stephen Gallagher sgallagh at redhat.com
Sun Oct 23 01:04:43 UTC 2011


On Sat, 2011-10-22 at 11:52 -0400, John Gorkos wrote:
> I've been handed a requirement to created nested groups in our LDAP directory 
> for our Posix logins to ease our admin load.  We are using RHEL6.1 and SSSD 
> 1.5.x from Redhat, along with OpenLDAP 2.4.x.  I have loaded up a test VM with 
> all the appropriate software, but for the life of me I can't make it work.

First of all, thank you for the highly detailed bug report. It always
makes tracking issues down much easier. 

You are hitting a known bug with SSSD 1.5.1 as shipped in RHEL 6.1. The
upstream ticket was https://fedorahosted.org/sssd/ticket/833

I am happy to inform you, however, that this bug was fixed upstream in
SSSD 1.5.9 and is backported for inclusion into RHEL 6.2.

This fix is present in the version of SSSD currently available in the
RHEL 6.2 Beta release, so you may wish to grab the SSSD packages from
there and give it a try.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20111022/6db458f1/attachment.sig>


More information about the sssd-devel mailing list