On 03/24/2015 05:08 PM, Guertin, David S. wrote:

I have three IPA servers set up (master and two replicas) and they're all behaving normally. AD users can log in, AD group restrictions are honored, etc. Now I'm trying to set up clients, and running into problems. I have three clients set up, and all three behave differently.

On one of the clients, users can log in like they can on the servers. On the other two, users can't log in, but these two behave differently from each other.

Client 1 and servers (this is correct):

# id 'MIDD\juser'

uid=435021613(ju...@middlebury.edu) gid=435021613(ju...@middlebury.edu) groups=435021613(ju...@middlebury.edu),435330225(computer science lab lo...@middlebury.edu),435231589(fmp_ms_eventschedule_us...@middlebury.edu),435208664(miis labfiles every...@middlebury.edu),435032463(mcms no rig...@middlebury.edu),435000513(domain us...@middlebury.edu),435286826(netoperat...@middlebury.edu),435461517(ipaus...@middlebury.edu <mailto:us...@middlebury.edu>)

Client 2 (AD groups are not listed):

# id 'MIDD\juser'

uid=435021613(ju...@middlebury.edu) gid=435021613(ju...@middlebury.edu) groups=435021613(ju...@middlebury.edu <mailto:ju...@middlebury.edu>)

Client 3 (user not found):

# id 'MIDD\juser'

id: MIDD\juser: No such user

On each client I have cleared the sssd cache (rm --f /var/lib/sss/db/*) and restarted sssd, with no effect. I have also uninstalled and re-installed the client, also with no effect.

What else can I try?

David Guertin

What are the platforms and package versions of SSSD on these clients?

Thank you,
Dmitri Pal

Sr. Engineering Manager IdM portfolio
Red Hat, Inc.

Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project

Reply via email to