[SSSD-users] id, ACLs, and remote groups
Dmitri Pal
dpal at redhat.com
Wed Aug 20 20:31:29 UTC 2014
On 08/20/2014 10:24 PM, Peter Kirby wrote:
> Well, one problem that I seem to have had was the smb.conf was not set
> up properly. Once I got those settings fixed, things do seem better.
>
> It's still not acting like I was expecting, but that's likely a
> problem with my expectations and not with SSSD. I suspect I just need
> to read more about the cache and get some more fine tuning done.
>
> For what it's worth, I was not able to compile the latest stable
> version (1.12.0). I got the following error:
> src/providers/ad/ad_gpo_child.c: In function
> ‘ad_gpo_parse_security_cse_buffer’:
> src/providers/ad/ad_gpo_child.c:301:5: error: implicit declaration of
> function ‘ini_config_file_from_mem’
> [-Werror=implicit-function-declaration]
>
> Since I really need to just run whatever version is in the CentOS
> repo, I didn't spend too much time trying to solve that problem. But,
> I'm happy to file a bug report or anything else that might be helpful
> if this is a problem with more than just my system.
You need the latest ding-libs package.
Build that first.
>
> Thanks,
> Peter
>
>
> --
> Peter Kirby
> System and Database Administrator @ Harding University
>
>
> On Tue, Aug 19, 2014 at 9:55 AM, Peter Kirby <lpkirby at harding.edu
> <mailto:lpkirby at harding.edu>> wrote:
>
> Steve, I have tried both ways just to be sure.
>
> Lukas, Nope, not mine.
>
>
> Since Steve's seems to be working, I think I'll try the latest
> stable version of SSSD and see if I have better luck. I'll report
> back either way.
>
> --
> Peter Kirby
> System and Database Administrator @ Harding University
>
>
> On Tue, Aug 19, 2014 at 5:01 AM, Lukas Slebodnik
> <lslebodn at redhat.com <mailto:lslebodn at redhat.com>> wrote:
>
> On (18/08/14 14:38), Peter Kirby wrote:
> >That's for the quick response. Unfortunately, that's not the
> behavior I'm
> >seeing. Here's what I see:
> >
> >1) Log in as root, erase the cache, and restart SSSD.
> >2) Log in as the user and try a "touch test" in a directory
> controlled by
> >ACL.
> >3) Get permission denied error.
> >4) As the user (root does not have to do this) run: getent
> group test-group
> >which shows the correct membership from Active Directory.
> >5) Attempt another "touch test", still permission denied.
> >6) Log out and then log back in.
> >7) One more "touch test" and it works.
> >
> Is it also your case?
> https://fedorahosted.org/sssd/ticket/2343
>
> LS
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> <mailto:sssd-users at lists.fedorahosted.org>
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users
>
>
>
>
>
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users
--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20140820/d4295f88/attachment-0001.html>
More information about the sssd-users
mailing list