On Thu, Mar 22, 2018 at 2:51 PM, Asif Iqbal vadud3@gmail.com wrote:
[..stripped for brevity..]
So I see 5% of current users have mnetid with leading 0.
So I never used sss_override. How do I use sss_override to make
mnetid
004311 to work with sss when ldap id mapping tries to map 4311 instead?
Appreciate your help!
I haven't tested it with your setup but
sss_override user_add mwvande --uid 4311 --gid 4311 sss_override group_add mwvande --gid 4311
should create the needed override data so that user and group mwvande can be looked up with the ID 4311.
So I can lookup by 4311 after this. Very nice!
Do I need to restart sssd after these two commands?
You have to restart SSSD after adding the first overrides to switch on the override handling. If you add additional override later on you do not have to restart SSSD, but you might need to wait until some cache timeouts are passed before the overridden values are shown.
I have a user today complained whose mnetid has leading 0s
[mwvande@example:]$ ssh sgx2-brdr-01
No user exists for uid 4311
I already have the sss_override ran last week for 100 users last week and sssd was restarted.
I am still wondering if there is a gap in my using sss_override
I have ran this, example commands, for all users with leading 0s in mnetid
sss_override user-add mwvande --uid 4311--gid 4311 sss_override group-add mwvande --gid 4311
Then I ran the systemctl restart sssd
Is there a step I am missing?
I have another user having the same issue with mnetid 027505 and username ac09446
As a workaround he ran `getent passwd ac09446` and `getent group ac09446` and that fixed it
Please advise
-- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?