[SSSD-users] id, ACLs, and remote groups

steve steve at steve-ss.com
Tue Aug 19 09:01:19 UTC 2014


On Mon, 2014-08-18 at 12:07 -0500, Peter Kirby wrote:
> I'm running CentOS 7, fully updated with SSSD version 1.11.2.  I used
> realm to setup SSSD and everything seems to be working fine for
> authentication.  I'm even able to filter access based on an ldap
> group.  My id and access providers are both set to ad.
> 
> 
> When I try to run: id username, all I get is the "domain users" group

It's OK on 11.5:

altet:/home/steve # sssd --version
1.11.5.1
altet:/home/steve # id steve2
uid=3000021(steve2) gid=20513(domain users) groups=20513(domain
users),21111(staff2)

Are you trying to use the sssd idmapping perhaps?
Steve





More information about the sssd-users mailing list