[SSSD-users] problems sssd-1.9.2

Longina Przybyszewska longina at sdu.dk
Wed Nov 28 09:53:54 UTC 2012


Thanks. I get it finally working!! : Ubuntu-Quantal sssd+ad_provider+NFSv4 - :-))  but still have some issues:
1.
Ticket expires after 10 hours - I run msktutil (application for joining linux to AD and adding principals to the account and some more)
 daily in crontab to prevent ticket expiration - maybe this is not necessary?
Anyway, I ends  having to manually reset machine's account and create a new keytab ( it is inefficient, but haven't figured out yet another way)
How  does sssd  renew tickets if machine was offline more then 10 hours?

2.
 To get rid off listing of  tens of group at login, I use the option:

ldap_group_member = uniqueMember 

It works during  login (no more long list, and login delay), but doesn't work when changing  personality with 'su -'
(again long list of numbers+ login delay)

Best regards
Longina

-----Original Message-----
From: sssd-users-bounces at lists.fedorahosted.org [mailto:sssd-users-bounces at lists.fedorahosted.org] On Behalf Of Jakub Hrozek
Sent: 22. november 2012 17:55
To: sssd-users at lists.fedorahosted.org
Subject: Re: [SSSD-users] problems sssd-1.9.2

On Thu, Nov 15, 2012 at 09:43:39AM +0000, Longina Przybyszewska wrote:
> 
> 
> -----Original Message-----
> From: sssd-users-bounces at lists.fedorahosted.org 
> [mailto:sssd-users-bounces at lists.fedorahosted.org] On Behalf Of Jakub 
> Hrozek
> Sent: 13. november 2012 17:38
> To: sssd-users at lists.fedorahosted.org
> Subject: Re: [SSSD-users] problems sssd-1.9.2
> 
> On Tue, Nov 13, 2012 at 03:40:14PM +0000, Longina Przybyszewska wrote:
> > 
> > 
> > -----Original Message-----
> > From: sssd-users-bounces at lists.fedorahosted.org
> > [mailto:sssd-users-bounces at lists.fedorahosted.org] On Behalf Of 
> > Jakub Hrozek
> > Sent: 13. november 2012 14:58
> > To: sssd-users at lists.fedorahosted.org
> > Subject: Re: [SSSD-users] problems sssd-1.9.2
> > 
> > On Tue, Nov 13, 2012 at 12:44:45PM +0000, Longina Przybyszewska wrote:
> > > Hi,
> > > I try sssd-1.9.2 on Ubuntu-Quantal with ad-provider.
> 
> 
> You might also be interested in the automounter integration, although I'm not sure that piece of functionality had been backported to Ubuntu yet. The Ubuntu automounter maintainer would know best.
> 
> Oh, yes - how stable is automounter integration in the latest stable SSSD?
> Is I enough to use autofs-5 - or does it need more integration with some SSSD moduls/libraries?

I think the sss support was introduced in autofs 5.0.6, at least in Fedora. I'm actually not quite sure about autofs upstream. You need to look for the lookup_sss.so module.

> 
> Until I am lucky to get new packages from Ubuntu maintainers - can I use nsswitch pointing to auto.home maps - would it work with SSSD?

The SSSD integration is provided by the lookup_sss.so module, which is able to talk to the autofs responder process of the SSSD. If your distribution doesn't provide that module, you should still be able to fall back to the LDAP lookups. You just won't be able to leverage the unified configuration in sssd.conf and caching of the maps.
_______________________________________________
sssd-users mailing list
sssd-users at lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users


More information about the sssd-users mailing list