<div dir="ltr"><div><div><div><div><div>Hi Lukas/Pavel,<br><br></div>SSSD is now working correctly for us. Following changes were done:<br><br></div>1. We had to add "ldap_use_tokengroups = False" in sssd.conf file. This got rid of the SID's and now only the GID/group name is retrieved.<br><br></div>2. I believe the reason 'id' only pulled gid's for some groups without the names was probably because sssd was still keeping hold of the old cache. I had to manually drop the cache file (/var/lib/sss/db) and then restart sssd service. After this, the id command displays the data correctly. Had tried sss_cache -E but that didn't flush the cache it seems.. <br><br></div>Thanks again for all the help.<br><br></div>~ Abhi <br></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Aug 26, 2015 at 12:55 AM, Lukas Slebodnik <span dir="ltr"><<a href="mailto:lslebodn@redhat.com" target="_blank">lslebodn@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On (25/08/15 16:24), Abhijit Tikekar wrote:<br>
>my bad.. yes.. that was because of sanitization.. Here is the complete<br>
>sssd.conf.<br>
><br>
>Log file after debug level 9 is big and exceeds the mailing list limits. Is<br>
>it okay to send it to you directly?<br>
><br>
</span>Sure.<br>
<div class="HOEnZb"><div class="h5"><br>
LS<br>
_______________________________________________<br>
sssd-users mailing list<br>
<a href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users" rel="noreferrer" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
</div></div></blockquote></div><br></div>