On Tue, Apr 23, 2019 at 12:03:20PM +0000, Ondrej Valousek wrote:
Hi List, I just noticed that sssd is unable to detect any groups user belongs to after I set Subdomains_provider = none In my sssd.conf
Using AD provider, using token groups, not using fully qualified names. Is this an expected behavior? Note I switched subdomain_provider off as otherwise sssd keeps poking around and requesting domain controllers which are not available.
btw this was solved by using ad_enabled_domains=joined.domain