[SSSD-users] id command not returning group names. only sid is returned.

Lukas Slebodnik lslebodn at redhat.com
Tue Aug 25 09:34:23 UTC 2015


On (24/08/15 08:38), Pavel Reichl wrote:
>
>
>On 08/21/2015 10:30 PM, Abhijit Tikekar wrote:
>>Hi,
>>
>>This is regarding the AD group name resolution in SSSD.
>>
>>We are using SSSD between CentOS and Microsoft AD. Integration works fine
>>and users are able to authenticate without any issues. For SSSD
>>installation, we were just using the Base repo and using yum to install the
>>latest version available.
>>
>>Lately we noticed that after user login, the "id" command returns only the
>>SID's and not the corresponding group name. I checked the installation and
>>made sure no step was missed. This is causing issues when users use "sudo"
>>(We have added specific group names under sudoers and the match fails
>>because no group names were returned.. only SID's)
>>
>>Previously this used to work fine(Version 1.11.6). but the version
>>currently being installed via yum is V 1.12.4.
>>
>>I could not find any reference to such behavior online with respect to V
>>1.12.4-47 and hence posting here.Has anyone experience similar issues with
>>this version?
>>
I'm not aware of any issues with that version and Active Directory.
I also cannot see a reason whyt there should be SID instead of names.
In most cases, there could be just GID without name, but not with SID.

Could you briefly describe steps used to jopind linux machine to AD?
Could you describe hierarchy of you AD servers?

>>Please advise.
>>
>>Thanks,
>>
>>~ Abhi
>>
>>
>Hello, could you please set debug_level in domain section and check logs in
>/var/log/sssd ? Feel free to obfuscate the logs and share it. Thanks!

Please also provide sssd configuration file (/etc/sssd/sssd.conf)

@see also upstream troubleshooting wiki page
https://fedorahosted.org/sssd/wiki/Troubleshooting

LS


More information about the sssd-users mailing list