[SSSD-users] id, ACLs, and remote groups

Dmitri Pal dpal at redhat.com
Wed Aug 20 20:31:29 UTC 2014


On 08/20/2014 10:24 PM, Peter Kirby wrote:
> Well, one problem that I seem to have had was the smb.conf was not set 
> up properly.  Once I got those settings fixed, things do seem better.
>
> It's still not acting like I was expecting, but that's likely a 
> problem with my expectations and not with SSSD.  I suspect I just need 
> to read more about the cache and get some more fine tuning done.
>
> For what it's worth, I was not able to compile the latest stable 
> version (1.12.0).  I got the following error:
> src/providers/ad/ad_gpo_child.c: In function 
> ‘ad_gpo_parse_security_cse_buffer’:
> src/providers/ad/ad_gpo_child.c:301:5: error: implicit declaration of 
> function ‘ini_config_file_from_mem’ 
> [-Werror=implicit-function-declaration]
>
> Since I really need to just run whatever version is in the CentOS 
> repo, I didn't spend too much time trying to solve that problem.  But, 
> I'm happy to file a bug report or anything else that might be helpful 
> if this is a problem with more than just my system.

You need the latest ding-libs package.
Build that first.

>
> Thanks,
> Peter
>
>
> --
> Peter Kirby
> System and Database Administrator @ Harding University
>
>
> On Tue, Aug 19, 2014 at 9:55 AM, Peter Kirby <lpkirby at harding.edu 
> <mailto:lpkirby at harding.edu>> wrote:
>
>     Steve,  I have tried both ways just to be sure.
>
>     Lukas, Nope, not mine.
>
>
>     Since Steve's seems to be working, I think I'll try the latest
>     stable version of SSSD and see if I have better luck.  I'll report
>     back either way.
>
>     --
>     Peter Kirby
>     System and Database Administrator @ Harding University
>
>
>     On Tue, Aug 19, 2014 at 5:01 AM, Lukas Slebodnik
>     <lslebodn at redhat.com <mailto:lslebodn at redhat.com>> wrote:
>
>         On (18/08/14 14:38), Peter Kirby wrote:
>         >That's for the quick response. Unfortunately, that's not the
>         behavior I'm
>         >seeing.  Here's what I see:
>         >
>         >1) Log in as root, erase the cache, and restart SSSD.
>         >2) Log in as the user and try a "touch test" in a directory
>         controlled by
>         >ACL.
>         >3) Get permission denied error.
>         >4) As the user (root does not have to do this) run: getent
>         group test-group
>         >which shows the correct membership from Active Directory.
>         >5) Attempt another "touch test", still permission denied.
>         >6) Log out and then log back in.
>         >7) One more "touch test" and it works.
>         >
>         Is it also your case?
>         https://fedorahosted.org/sssd/ticket/2343
>
>         LS
>         _______________________________________________
>         sssd-users mailing list
>         sssd-users at lists.fedorahosted.org
>         <mailto:sssd-users at lists.fedorahosted.org>
>         https://lists.fedorahosted.org/mailman/listinfo/sssd-users
>
>
>
>
>
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IdM portfolio
Red Hat, Inc.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20140820/d4295f88/attachment-0001.html>


More information about the sssd-users mailing list