Sorry, I found it.

One time I used authconfig with --enablerfc2307bis, and then I removed the option from the command line assuming that it would be erased from the config.

The config still had the rfc2307bis.

Sorry :)

*--Felip Moll Marquès* Computer Science Engineer E-Mail - lipixx@gmail.com WebPage - http://lipix.ciutadella.es

2016-02-18 15:44 GMT+01:00 Felip Moll lipixx@gmail.com:

Hello,

I configured sssd with authconfig in a Centos 6. My users are shown perfectly with getent passwd, and my groups are shown, but empty.

I tried with debug 9 in [nss] section in sssd.conf but I found nothing relevant.

Also cleared cache (sss_cache -E), turned on/off enumerate, etc. Any advice on what to look for?

Fragment of sssd_nss.log:

... (Thu Feb 18 15:21:12 2016) [sssd[nss]] [sss_ncache_check_str] (0x2000): Checking negative cache for [NCE/GROUP/default/usertest] (Thu Feb 18 15:21:12 2016) [sssd[nss]] [sss_ncache_check_str] (0x2000): Checking negative cache for [NCE/GROUP/default/devel] ....

rfc2307 LDAP setup - ldapsearch:

# devel, Groups, test.cat dn: cn=devel,ou=Groups,dc=test,dc=cat objectClass: posixGroup description: Devel staff gidNumber: 40003 cn: devel memberUid: user1 memberUid: user2

authconfig line:

authconfig --enablelocauthorize --enablecachecreds --enableldap --enableldapauth --ldapserver=ldap://head1 --ldapbasedn="dc=test,dc=cat" --enableldaptls --enableldapstarttls --updateall

getent group:

..... usertest:*:40004: devel:*:40003: .....

Thank you very much. Felip M

*--Felip Moll Marquès* Computer Science Engineer E-Mail - lipixx@gmail.com WebPage - http://lipix.ciutadella.es