[SSSD-users] Empty groups with sssd 1.9.4
Jakub Hrozek
jhrozek at redhat.com
Wed Feb 20 20:35:21 UTC 2013
On Wed, Feb 20, 2013 at 08:23:04AM +0100, Michael Ströder wrote:
> Pavel Březina wrote:
> >> But I'm struggling that groups are not correctly retrieved - see my last
> >> attempt of sssd.conf attached.
> >>
> >> 1. After login id does not show the user's groups although the OpenLDAP logs
> >> show that group entries are searched and returned to sssd by OpenLDAP's slapd.
> >
> > can you raise debug level in nss, sudo and domain section to 9 (put
> > debug_level = 9 in [nss], [sudo] and [domain/yourdomain] sections in
> > sssd.conf? What does the logs say?
>
> It turned out to be a bug in our own Debian package.
> The lib memberof.so was not found.
>
> Now I'm still working on getting sudoers to work via sssd. But that's another
> story...
Glad the issue was resolved! Feel free to ping this list again if you
can't get the sudo integration working. Please note you need relatively
recent sudo built with the --with-sssd (not sure if Debian would do that
even in -unstable/-testing)
More information about the sssd-users
mailing list