<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 10/23/2014 02:36 PM, Karich, Michael
wrote:<br>
</div>
<blockquote
cite="mid:E8485E913DD2CB46BC9E4A14AA1E65C237603A8E@UTDEX32.campus.ad.utdallas.edu"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:"Eras Medium ITC";
        panose-1:2 11 6 2 3 5 4 2 8 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:#0563C1;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:#954F72;
        text-decoration:underline;}
span.EmailStyle17
        {mso-style-type:personal-compose;
        font-family:"Eras Medium ITC","sans-serif";
        color:windowtext;
        font-weight:normal;
        font-style:normal;
        text-decoration:none none;
        vertical-align:baseline;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;
        font-family:"Calibri","sans-serif";}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif"">Good afternoon,<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif"">I have run into an issue
on Cent 7 with sssd configured for AD auth. I am able to
auth via AD usernames and passwords without issue and can
“getent group MOSTGROUPS”. But I have run into an issue
where there are some groups that are not being seen /
discovered / enumerated etc.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif"">ID of a validated username
will display most of the groups, but there are some groups
that are not listed which are also those are also the ones
that fail getent group. I cannot find a pattern in what
groups fail to enumerate. At first I thought it was length,
but there are group names over 20 characters that succeed.</span></p>
</div>
</blockquote>
<br>
What version of SSSD?<br>
<br>
Did you get get all the right groups when user actually logs in?<br>
If this is the case than it is a known and expected behavior in
1.11.x.<br>
If you are using the latest 1.12.x you should see all groups so if
you do not then this is a bug.<br>
<br>
<blockquote
cite="mid:E8485E913DD2CB46BC9E4A14AA1E65C237603A8E@UTDEX32.campus.ad.utdallas.edu"
type="cite">
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif"">EX. ID of user1:<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif"">Group1, group 2, group 5<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif"">Getent group group1<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif"">Username list!<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif"">Getent group “Group 2”<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif"">Username list!<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif"">Getent group group3 (user
is a long time member of group in AD)<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif"">Blank output<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif"">Strace reveals that the
command exited with status 2. Nothing is logged in
sssd_DOMAIN.log<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif"">Please let me know where
to look next, thank you.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif"">Mike Karich<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif"">IT Manager<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif"">Center for Vital
Longevity<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif"">1600 Viceroy Rd<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif"">Dallas, TX 75235<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif""><o:p> </o:p></span></b></p>
<p class="MsoNormal"><a moz-do-not-send="true"
href="mailto:mkarich@utdallas.edu"><b><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif";color:#0563C1">mkarich@utdallas.edu</span></b></a><b><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif""><o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif"">P: 972-883-3745 C:
972-757-3299<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif""><o:p> </o:p></span></b></p>
<p class="MsoNormal"><b><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif"">CVL IT Assistance:
</span></b><a moz-do-not-send="true"
href="mailto:CVLTech@utdallas.edu"><b><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif";color:#0563C1">CVLTech@utdallas.edu</span></b></a><b><span
style="font-size:12.0pt;font-family:"Eras Medium
ITC","sans-serif""><o:p></o:p></span></b></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
sssd-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a>
<a class="moz-txt-link-freetext" href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a>
</pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>