<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'><pre>Is nss-pam-ldap installed on the problem host?<br><br><br><br><br>No, I believe I removed it during one of several troubleshooting tips I was trying out this week.<br>I reinstalled it, and still got the same results.<br><br>Primary group show, but none of the other/secondary groups do.<br></pre><br><br>-LK<br><br><div><hr id="stopSpelling">From: unholi@hotmail.com<br>To: sssd-users@lists.fedorahosted.org<br>Subject: How do I view multiple users groups using sssd?<br>Date: Fri, 10 Apr 2015 14:32:13 -0400<br><br>
<style><!--
.ExternalClass .ecxhmmessage P {
padding:0px;
}
.ExternalClass body.ecxhmmessage {
font-size:12pt;
font-family:Calibri;
}
--></style>
<div dir="ltr"><div class="ecxpost-text">
<h2>SETUP</h2>
<strong>OS = RHEL 6.4 Workstation<br></strong><br>
System is part of a LDAP domain and was originally configured to authenticate using <strong>nscd</strong>. <br><br>This is a NON-Windows / NON-Active Directory environment, straight up *NIX.<br><br>
<br>All recommended SSSD packages have been installed. <br>
<pre><code>[root@sssd_system]# rpm -qa | grep sssd
sssd-client-1.11.6-30.el6_6.4.x86_64
sssd-common-1.11.6-30.el6_6.4.x86_64
sssd-common-pac-1.11.6-30.el6_6.4.x86_64
sssd-krb5-common-1.11.6-30.el6_6.4.x86_64
sssd-ldap-1.11.6-30.el6_6.4.x86_64
sssd-proxy-1.11.6-30.el6_6.4.x86_64
sssd-tools-1.11.6-30.el6_6.4.x86_64
</code></pre>
Files which have been created/modified to switch over to <strong>SSSD</strong>:<br><br><br>
<u><strong>/etc/nsswitch.conf</strong></u><code><br>[root@sssd_system]# ls -ld /etc/nsswitch.conf
-rw-r--r-- 1 root root 560 Apr 9 12:07 /etc/nsswitch.conf
</code><br>
<br>cat /etc/nsswitch.conf <br>
<pre><code>passwd: files sss
shadow: files sss
group: files sss
ethers: files sss
services: files sss
netgroup: files sss
</code></pre>
<br>
<u><strong>/etc/sssd/sssd.conf</strong></u><code><br>[root@sssd_system]# ls -ld /etc/sssd/sssd.conf
-rw------- 1 root root 971 Apr 9 11:48 /etc/sssd/sssd.conf
</code><br>
<br>cat /etc/sssd/sssd.conf <br>
<pre><code>[domain/default] <br></code><code><code>id_provider = ldap
auth_provider = ldap
chpass_provider = ldap <br></code>
ldap_schema = rfc2307bis
ldap_uri = ldap://server1.domain.com,ldap://server2.domian.com</code><code><code>,ldap://server3.domian.com</code>
ldap_search_base = dc=domain,dc=com
ldap_user_search_base = ou=People,dc=domain,dc=com
ldap_group_search_base = ou=Group,dc=domain,dc=com
ldap_group_member = uniqueMember
ldap_id_use_start_tls = False
cache_credentials = True
ldap_tls_cacertdir = /etc/openldap/cacerts
ldap_tls_cacert = /etc/openldap/cacerts/certname.pem
<br>debug_level = 9
[sssd]
domains = default
services = nss,pam,autofs
config_file_version = 2
sbus_timeout = 30
<br>[nss]<br>filter_groups = root<br>filter_users = root,ldap,named,avahi,haldaemon,dbus,radiusd,news,nscd<br><br>[pam]<br>reconnection_retries = 3<br>offline_credentials_expiration = 2<br>offline_failed_login_attempts = 3<br>offline_failed_login_delay = 5<br><br>[sudo]<br><br>[autofs]<br><br>[ssh]<br></code><strong><em><br>NOTE:</em></strong><em> The <strong>authconfig</strong>
command was used to configure this system, so in theory, that means that
all the right files were touch with the correct information.</em> <br>
</pre><hr>
<h2>ISSUE </h2><pre><code>[USERID@nscd_host]# groups USERID
USERID: USERGRP USERGRP2 USERGRP3 USERGRP4 USERGRP5
[USERID@nscd_host]# ssh USERID@sssd_system
Red Hat Enterprise Linux Workstation release 6.4 (Santiago)
Last login: Thu Apr 9 11:51:38 2015 from nscd_host
[USERID@sssd_system]# groups USERID
</code><code><code>USERID: USERGRP</code>
</code></pre>
<hr>
<h2>QUESTION</h2>
<strong><em>What am I missing?</em></strong> <br>
I've been researching the dickens for a solution to what is likely a
simple configuration error, but haven't been able to pinpoint the exact
config file(s). I've also reference Red Hat's documentation on setting
up SSSD in their <em>Deployment Guide</em> and found several helpful guides posted out on the web. <br>
And, I've also enabled debug level within <strong>sssd.conf</strong> file, but have not been able to find anything overtly meaningful within the logs <strong><em>/var/log</em>/sssd/*</strong> log file(s) or <strong>/var/log/(message|secure)</strong> either.<br>
Any assistance to what I might be missing would be greatly appreciated. <br>
</div><br><br>-LK                                            </div></div>                                            </div></body>
</html>