[SSSD-users] problems sssd-1.9.2

Longina Przybyszewska longina at sdu.dk
Tue Nov 13 15:40:14 UTC 2012



-----Original Message-----
From: sssd-users-bounces at lists.fedorahosted.org [mailto:sssd-users-bounces at lists.fedorahosted.org] On Behalf Of Jakub Hrozek
Sent: 13. november 2012 14:58
To: sssd-users at lists.fedorahosted.org
Subject: Re: [SSSD-users] problems sssd-1.9.2

On Tue, Nov 13, 2012 at 12:44:45PM +0000, Longina Przybyszewska wrote:
> Hi,
> I try sssd-1.9.2 on Ubuntu-Quantal with ad-provider.
> 
> So far I can login to the desktop with AD identity; Login hangs a bit 
> because of unknown group;
> 
> What is the best practice  to resolve the group (set up 
> PrimaryGroupId, run  idmap????)
> 

Sorry, I don't quite understand this problem...are you seeing a particular group GID not being converted from SID? 

Or are you seeing failures due to the SSSD attempting to convert any of the "local" groups such as "Domain Users" ?

I see  messages about groups - why so many at one aduser login?
..........
Groups: cannot find name for group ID 332400513
Groups: cannot find name for group ID 988022561
Groups: cannot find name for group ID 988803222
Groups: cannot find name for group ID .....
....and tens more...


> The option 'default_shell = /bin/bash'  in sssd.conf  doesn't seem to 
> have  effect.
>  I would expect it being visible In users info:
> 

Into which section in the SSSD did you put the default_shell option? In
1.9.2 it was only supported in the [nss] section, we changed the option to also take effect in the domain section during 1.9.3 development.

OK - I put it into [domain] 

> getent passwd imadatestuser
> imadatestuser:*:332410389:332400513:IMADAtest Testesen:/home/imadatestuser:
> 
> 
> In pam.d/common-session  I added entry for case of nonexistent homedir 
> reference, and shell - so ADuser can login.
> 

Do your users have any home directory at all? Could you maybe use the fallback_homedir or override_homedir directives?

Yes, I do use fallback_homedir in [domain] section and that works. 

Linux users have homedirs on NFSserver -  auto.home maps are in NIS format.

Your SSSD is really great piece of software  - so elegant concept ! I love it.

Best
longina

  
 

 
_______________________________________________
sssd-users mailing list
sssd-users at lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users


More information about the sssd-users mailing list