[SSSD-users] id, ACLs, and remote groups

Peter Kirby lpkirby at harding.edu
Tue Aug 19 14:55:20 UTC 2014


Steve,  I have tried both ways just to be sure.

Lukas, Nope, not mine.


Since Steve's seems to be working, I think I'll try the latest stable
version of SSSD and see if I have better luck.  I'll report back either way.

--
Peter Kirby
System and Database Administrator @ Harding University


On Tue, Aug 19, 2014 at 5:01 AM, Lukas Slebodnik <lslebodn at redhat.com>
wrote:

> On (18/08/14 14:38), Peter Kirby wrote:
> >That's for the quick response.  Unfortunately, that's not the behavior I'm
> >seeing.  Here's what I see:
> >
> >1) Log in as root, erase the cache, and restart SSSD.
> >2) Log in as the user and try a "touch test" in a directory controlled by
> >ACL.
> >3) Get permission denied error.
> >4) As the user (root does not have to do this) run: getent group
> test-group
> >which shows the correct membership from Active Directory.
> >5) Attempt another "touch test", still permission denied.
> >6) Log out and then log back in.
> >7) One more "touch test" and it works.
> >
> Is it also your case?
> https://fedorahosted.org/sssd/ticket/2343
>
> LS
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20140819/774910b4/attachment.html>


More information about the sssd-users mailing list