[SSSD] Fruits and Nuts (or, need help with nested LDAP groups)

John Gorkos John.Gorkos at sensus.com
Mon Oct 24 18:29:30 UTC 2011


On Monday, October 24, 2011 12:30:40 PM Stephen Gallagher wrote:
> On Mon, 2011-10-24 at 07:27 -0400, Gorkos, John wrote:
> 
> > Ding Ding Ding!  We have a winner!
> > Addint the "ldap_group_object_class" to my 1.5.14 sssd.conf did indeed
> > fix my nested groups problem:
> > # id alpha
> > uid=10001(alpha) gid=1000(users)
> > groups=1000(users),1001(fruits),1002(nuts)
> > 
> > It does not work on 1.5.1 (which we suspected/knew already), but I'm
> > comfortable pushing the newer RPMs to my management machine.
> 
> 
> For the record, the fact that RHEL 6.2 identifies the version as SSSD
> 1.5.1 is a peculiarity of the RHEL process (which requires that you
> start from a particular upstream version and then apply patches to fix
> individual issues). However, the final release of RHEL 6.2 will be
> functionally identical to 1.5.14 (or possibly 1.5.15 if we discover
> urgent fixes before it ships).
> 
> I do encourage you to try the SSSD version in the 6.2 beta (and
> ultimately final) which should provide you the same functionality and
> keep you on an enterprise-supported version.

We're pulling the 6.2Beta repo now for our 6.x systems.  Is there any hope for 
a backport of the 1.5.9+ tree to RHEL5, since the majority of my systems are 
5.3 and 5.5 (upgrading is blocked by our s/w development group).

John Gorkos



More information about the sssd-devel mailing list