Hi List, I am using sssd 1-12-4 (last one in RHEL-6) and I am suffering a strange problem: User is member of group A which is nested into group B.
Now, sometimes it happens that "id -a" only shows membership in group A, but not B. Happens only sometimes. Do we know?
Thanks, Ondrej
-----
The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited (S3 Group). Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18.
On Fri, Oct 02, 2015 at 01:37:40PM +0000, Ondrej Valousek wrote:
Hi List, I am using sssd 1-12-4 (last one in RHEL-6)
There is a ton of patches atop .4 in RHEL-5, I would suggest to upgrade to .5 if you can.
and I am suffering a strange problem: User is member of group A which is nested into group B.
Now, sometimes it happens that "id -a" only shows membership in group A, but not B. Happens only sometimes. Do we know?
We've heard about a couple of similarly sounding issues, but could never see the logs or anything that would help us trace the issues down :-/
On Sun, Oct 04, 2015 at 09:06:33PM +0200, Jakub Hrozek wrote:
On Fri, Oct 02, 2015 at 01:37:40PM +0000, Ondrej Valousek wrote:
Hi List, I am using sssd 1-12-4 (last one in RHEL-6)
There is a ton of patches atop .4 in RHEL-5, I would suggest to upgrade
RHEL-6, sorry.
to .5 if you can.
and I am suffering a strange problem: User is member of group A which is nested into group B.
Now, sometimes it happens that "id -a" only shows membership in group A, but not B. Happens only sometimes. Do we know?
We've heard about a couple of similarly sounding issues, but could never see the logs or anything that would help us trace the issues down :-/ _______________________________________________ sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-users
Thing is that .5 is not in the official repo yet :(
-----Original Message----- From: sssd-users-bounces@lists.fedorahosted.org [mailto:sssd-users-bounces@lists.fedorahosted.org] On Behalf Of Jakub Hrozek Sent: 05 October 2015 07:28 To: sssd-users@lists.fedorahosted.org Subject: Re: [SSSD-users] nested groups enumeration problem
On Sun, Oct 04, 2015 at 09:06:33PM +0200, Jakub Hrozek wrote:
On Fri, Oct 02, 2015 at 01:37:40PM +0000, Ondrej Valousek wrote:
Hi List, I am using sssd 1-12-4 (last one in RHEL-6)
There is a ton of patches atop .4 in RHEL-5, I would suggest to upgrade
RHEL-6, sorry.
to .5 if you can.
and I am suffering a strange problem: User is member of group A which is nested into group B.
Now, sometimes it happens that "id -a" only shows membership in group A, but not B. Happens only sometimes. Do we know?
We've heard about a couple of similarly sounding issues, but could never see the logs or anything that would help us trace the issues down :-/ _______________________________________________ sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-users
_______________________________________________ sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-users
-----
The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited (S3 Group). Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18.
Yes, that's correct 4-47.el6 it is. Thing is that I am seeing quite lot of: [sdap_process_result] (0x0040): ldap_result error: [Can't contact LDAP server]
Errors in the sssd log file. Thinking that could be an issue when processing nested groups. Ondrej -----Original Message----- From: sssd-users-bounces@lists.fedorahosted.org [mailto:sssd-users-bounces@lists.fedorahosted.org] On Behalf Of Lukas Slebodnik Sent: 05 October 2015 09:18 To: End-user discussions about the System Security Services Daemon sssd-users@lists.fedorahosted.org Subject: Re: [SSSD-users] nested groups enumeration problem
On (05/10/15 08:08), Ondrej Valousek wrote:
Thing is that .5 is not in the official repo yet :(
You mentioned that you are using the latest 1.12.4 in rhel6. I assume it is 1.12.4-47.el6. (It's better to every time mentions full version in report) Is it correct?
LS _______________________________________________ sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-users
-----
The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited (S3 Group). Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18.
On (05/10/15 09:30), Ondrej Valousek wrote:
Yes, that's correct 4-47.el6 it is. Thing is that I am seeing quite lot of: [sdap_process_result] (0x0040): ldap_result error: [Can't contact LDAP server]
Is there a reason why sssd cannot contact server? DNS issues, network issues ...
LS
sssd-users@lists.fedorahosted.org