try adding
enumerate = true
to your sssd.conf clearing the cache and restart sssd.

regards,
Aaron

On 4/30/2014 8:51 AM, Enrico Morelli wrote:
Dear all,

I'm a new user about 389 DS. I installed it on a RHEL 6 (32bit) server:
89-admin-console-doc-1.1.8-1.el6.noarch
389-ds-1.2.2-1.el6.noarch
389-ds-base-1.2.11.15-32.el6_5.i686
389-ds-base-libs-1.2.11.15-32.el6_5.i686
389-ds-console-1.2.6-1.el6.noarch
389-admin-console-1.1.8-1.el6.noarch
389-dsgw-1.1.11-1.el6.i686
389-admin-1.1.35-1.el6.i686
389-adminutil-1.1.19-1.el6.i686
389-ds-console-doc-1.2.6-1.el6.noarch
389-console-1.1.7-1.el6.noarch

I've troubles with groups. I created posix user and group. I'm able to
login on the Linux client (SL 6 32bit) but I receive the error: cannot
find name for group ID.

I had search on google to find a solution, but all the suggestions I've
find didn't work for me.

This is the sssd.conf on the client, with all attempts to solve the
problem
-----------------------------------------------
[domain/default]
ldap_schema = rfc2307bis
ldap_id_use_start_tls = True
cache_credentials = True
ldap_search_base = dc=mydomain,dc=it
#krb5_realm = EXAMPLE.COM
#krb5_server = kerberos.example.com
id_provider = ldap
auth_provider = ldap
chpass_provider = ldap
ldap_uri = ldaps://myserver
ldap_tls_cacertdir = /etc/openldap/cacerts
entry_cache_timeout = 600
ldap_network_timeout = 3
#ldap_group_name = uniqueMember
ldap_group_object_class = groupofuniquenames
[sssd]
services = nss, pam
config_file_version = 2

domains = default
-----------------------------------------------------------------

If I add the member to the group through the management console
group->Members->Static Group, switch on the ldap_group_name =
uniqueMember parameter on the client, clear cache, restart sssd and
type id user I obtain:
uid=1001(morelli)
gid=1001(uid=morelli,cn=students,ou=Groups,dc=mydoman,dc=it)
groups=1001(uid=morelli,cn=students,ou=Groups,dc=mydomain,dc=it)

There is a way to solve the problem?
Thanks

--
389 users mailing list
[email protected]
https://admin.fedoraproject.org/mailman/listinfo/389-users

Reply via email to