[SSSD-users] how to map unix group name to other attribute than "cn" of the group entry

Jakub Hrozek jhrozek at redhat.com
Tue Aug 12 07:28:06 UTC 2014


On Tue, Aug 12, 2014 at 02:17:29PM +0800, XuQing Tan wrote:
> Hi Jakub
> 
> attached is the log files, and blow is the commands sequence:
> 
> [root at 10-0-0-84 ~]# service sssd stop
> Stopping sssd:                                             [  OK  ]
> [root at 10-0-0-84 ~]# rm -f /var/lib/sss/db/cache_*.ldb
> [root at 10-0-0-84 ~]# service sssd start
> Starting sssd:                                             [  OK  ]
> [root at 10-0-0-84 ~]# id nick at example.com
> uid=15001(nick) gid=20000(my-testing-group-at-world-wide-space)
> groups=20000(my-testing-group-at-world-wide-space)

I see this request in the logs

> [root at 10-0-0-84 ~]# getent group -s -sss
> my-testing-group-at-world-wide-space
> [root at 10-0-0-84 ~]# getent group -s -sss test-group
> [root at 10-0-0-84 ~]#

But not these. How does your /etc/nsswitch.conf looks like?

Can you re-send yet again with just the getent group requests, without
the id request?

Does getent group -s files 20000 return anything?

Can you strace the getent group -s sss command?


More information about the sssd-users mailing list