On Tuesday, July 30, 2019 22:35 PDT, Sumit Bose sbose@redhat.com wrote:
the version of SSSD you are using should automatically pick a new range if the RID is too large. Can you send your sssd.conf for a start to better understand your setup and see what might preventing SSSD from picking a new range?
The configuration file is generated by "realm join". Are there any specific patterns you'd like to see from the logs that might provide more information?
[sssd] domains = business.com config_file_version = 2 services = nss, pam
[domain/business.com] debug = 6 ad_domain = business.com krb5_realm = BUSINESS.COM realmd_tags = manages-system joined-with-samba cache_credentials = False id_provider = ad krb5_store_password_if_offline = True default_shell = /bin/bash ldap_id_mapping = True use_fully_qualified_names = False fallback_homedir = /home/business/%u access_provider = ad
On Wed, Jul 31, 2019 at 12:24:58PM -0700, Gordon Messmer wrote:
On Tuesday, July 30, 2019 22:35 PDT, Sumit Bose sbose@redhat.com wrote:
the version of SSSD you are using should automatically pick a new range if the RID is too large. Can you send your sssd.conf for a start to better understand your setup and see what might preventing SSSD from picking a new range?
The configuration file is generated by "realm join". Are there any specific patterns you'd like to see from the logs that might provide more information?
Hi,
thanks for the config. As a next step please set 'debug_level=9' in the [domain/...] section, restart SSSD, call 'getent passwd newish_user' and then send the SSSD domain log from /var/log/sssd. Feel free to send it to me directly if you prefer to not have it on the list.
bye, Sumit
[sssd] domains = business.com config_file_version = 2 services = nss, pam
[domain/business.com] debug = 6 ad_domain = business.com krb5_realm = BUSINESS.COM realmd_tags = manages-system joined-with-samba cache_credentials = False id_provider = ad krb5_store_password_if_offline = True default_shell = /bin/bash ldap_id_mapping = True use_fully_qualified_names = False fallback_homedir = /home/business/%u access_provider = ad
sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.o...
sssd-users@lists.fedorahosted.org