[SSSD-users] Slow convergence between sssd and windows 2008 r2 ad server

steve steve at steve-ss.com
Fri May 2 12:52:42 UTC 2014


On Fri, 2014-05-02 at 13:21 +0200, Paul Liljenberg wrote:
> I did try  modifying the conf with your suggested settings, but it did
> not work. Hm.. I wonder if theres an error with sasl.
> 
> 
> /var/log/auth.log:
> May  2 12:58:44 client sssd_be: canonuserfunc error -7
> May  2 12:58:44 client sssd_be: _sasl_plugin_load failed on
> sasl_canonuser_init for plugin: ldapdb
> 
> 

> What do you think?

Do you have the time or are allowed to build a later version? Guessing
what the devs have posted, it looks as if debian is stuck with an old
version. I know gssapi works with 1.9 and better with the link I posted.
Oh, maybe check the key really is in the keytab?

Cheers,
Steve




> 
> 
> On Fri, May 2, 2014 at 11:22 AM, steve <steve at steve-ss.com> wrote:
>         On Fri, 2014-05-02 at 11:03 +0200, Paul Liljenberg wrote:
>         > Unfortuneately im tied to current debian stable in this
>         setup and
>         > backporting sssd does not seem possible. Thanx Steve.
>         >
>         
>         OK. You'll have to do the AD attribute mapping manually then.
>         This worked for us with 1.9:
>         
>         ldap_user_object_class = user
>         ldap_user_name = samAccountName
>         ldap_user_uid_number = uidNumber
>         ldap_user_gid_number = gidNumber
>         ldap_user_home_directory = unixHomeDirectory
>         ldap_user_shell = loginShell
>         ldap_group_object_class = group
>         ldap_group_search_base = dc=your,dc=domain
>         ldap_group_name = cn
>         ldap_group_member = member
>         #ldap_user_search_filter
>         =(&(objectCategory=User)(uidNumber=*))
>         
>         I think the commented filter was for 1.8. This should get your
>         user
>         through the process.
>         HTH
>         Steve
>         
>         
>         
>         _______________________________________________
>         sssd-users mailing list
>         sssd-users at lists.fedorahosted.org
>         https://lists.fedorahosted.org/mailman/listinfo/sssd-users
>         
> 
> 
> 
> 
> -- 
> Vänliga Hälsningar / Best Regards
> Paul Liljenberg
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users




More information about the sssd-users mailing list