[SSSD-users] how to map unix group name to other attribute than "cn" of the group entry
Jakub Hrozek
jhrozek at redhat.com
Tue Aug 12 07:28:06 UTC 2014
On Tue, Aug 12, 2014 at 02:17:29PM +0800, XuQing Tan wrote:
> Hi Jakub
>
> attached is the log files, and blow is the commands sequence:
>
> [root at 10-0-0-84 ~]# service sssd stop
> Stopping sssd: [ OK ]
> [root at 10-0-0-84 ~]# rm -f /var/lib/sss/db/cache_*.ldb
> [root at 10-0-0-84 ~]# service sssd start
> Starting sssd: [ OK ]
> [root at 10-0-0-84 ~]# id nick at example.com
> uid=15001(nick) gid=20000(my-testing-group-at-world-wide-space)
> groups=20000(my-testing-group-at-world-wide-space)
I see this request in the logs
> [root at 10-0-0-84 ~]# getent group -s -sss
> my-testing-group-at-world-wide-space
> [root at 10-0-0-84 ~]# getent group -s -sss test-group
> [root at 10-0-0-84 ~]#
But not these. How does your /etc/nsswitch.conf looks like?
Can you re-send yet again with just the getent group requests, without
the id request?
Does getent group -s files 20000 return anything?
Can you strace the getent group -s sss command?
More information about the sssd-users
mailing list