Given what you're describing I would suspect that enumeration is set to "true" and the cache is being overwhelmed cyclically.
Just a thought,
-- lawrence
On Fri, May 31, 2019 at 2:09 PM Jim Burwell jimb@jsbc.cc wrote:
Hi,
I'm experiencing an issue with SSSD 1.11.5 running on Ubuntu 12.04.5 LTS. It's using the AD provider, pointing to AD servers with POSIX groups configured (ldap_id_mapping = False).
The issue I'm experiencing is that all of a user's groups vanishes from "id" and "groups" after several hours (appears to be 8-12 hours), except for his/her login group.
sss_cache -E doesn't fix it
Restarting SSSD doesn't fix it.
However, stopping SSSD, removing /var/lib/sss/db/*, and restarting SSSD does fix it.
After manually removing the cache files in the DB dir, SSSD will then see all of a users groups until several hours pass, then, again, all but his login group will vanish until the files are removed and SSSD restarted again.
Is this a known issue, perhaps a bug fixed in some future version?
BTW, if you're wondering, the SSSD version I'm using is a backport of 1.11.5 found here in this PPA: https://launchpad.net/~sssd/+archive/ubuntu/updates
This is how I'm able to use the AD provider with Ubuntu 12. I know it's not supported, etc. I'm just looking for any insights or suggestions, or whether a known bug exists for this version that exhibits this "vanishing groups" behavior.
TIA,
- Jim
sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.o...