[SSSD-users] problems sssd-1.9.2
Longina Przybyszewska
longina at sdu.dk
Tue Nov 13 15:40:14 UTC 2012
-----Original Message-----
From: sssd-users-bounces at lists.fedorahosted.org [mailto:sssd-users-bounces at lists.fedorahosted.org] On Behalf Of Jakub Hrozek
Sent: 13. november 2012 14:58
To: sssd-users at lists.fedorahosted.org
Subject: Re: [SSSD-users] problems sssd-1.9.2
On Tue, Nov 13, 2012 at 12:44:45PM +0000, Longina Przybyszewska wrote:
> Hi,
> I try sssd-1.9.2 on Ubuntu-Quantal with ad-provider.
>
> So far I can login to the desktop with AD identity; Login hangs a bit
> because of unknown group;
>
> What is the best practice to resolve the group (set up
> PrimaryGroupId, run idmap????)
>
Sorry, I don't quite understand this problem...are you seeing a particular group GID not being converted from SID?
Or are you seeing failures due to the SSSD attempting to convert any of the "local" groups such as "Domain Users" ?
I see messages about groups - why so many at one aduser login?
..........
Groups: cannot find name for group ID 332400513
Groups: cannot find name for group ID 988022561
Groups: cannot find name for group ID 988803222
Groups: cannot find name for group ID .....
....and tens more...
> The option 'default_shell = /bin/bash' in sssd.conf doesn't seem to
> have effect.
> I would expect it being visible In users info:
>
Into which section in the SSSD did you put the default_shell option? In
1.9.2 it was only supported in the [nss] section, we changed the option to also take effect in the domain section during 1.9.3 development.
OK - I put it into [domain]
> getent passwd imadatestuser
> imadatestuser:*:332410389:332400513:IMADAtest Testesen:/home/imadatestuser:
>
>
> In pam.d/common-session I added entry for case of nonexistent homedir
> reference, and shell - so ADuser can login.
>
Do your users have any home directory at all? Could you maybe use the fallback_homedir or override_homedir directives?
Yes, I do use fallback_homedir in [domain] section and that works.
Linux users have homedirs on NFSserver - auto.home maps are in NIS format.
Your SSSD is really great piece of software - so elegant concept ! I love it.
Best
longina
_______________________________________________
sssd-users mailing list
sssd-users at lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users
More information about the sssd-users
mailing list