Re: [Freeipa-users] group issue (freeipa4)

2015-03-05 Thread Jakub Hrozek
On Thu, Mar 05, 2015 at 10:22:35AM +0100, Łukasz Jaworski wrote: > > This ^^ line tells me it's a known SSSD bug: > >https://fedorahosted.org/sssd/ticket/2421 > > > > This bug only happens in a combination of old client and a particular > > server version. > > > > IIRC a subsequent server upd

Re: [Freeipa-users] group issue (freeipa4)

2015-03-05 Thread Łukasz Jaworski
> This ^^ line tells me it's a known SSSD bug: >https://fedorahosted.org/sssd/ticket/2421 > > This bug only happens in a combination of old client and a particular > server version. > > IIRC a subsequent server update fixed the ACIs on the server so that at > least objectClass was readable. Y

Re: [Freeipa-users] group issue (freeipa4)

2015-03-05 Thread Jakub Hrozek
On Thu, Mar 05, 2015 at 08:32:32AM +0100, Łukasz Jaworski wrote: > Hello, > > I have group issue on sssd 1.8.6 and 1.11.5 (on ubuntu 12.04 and 14.04) and > freeipa4 (freeipa-server-4.1.2-1 on fedora 21, 389-ds-base-1.3.3.8-1). > > If user has assigned Role I couldn't get all groups with "id" com

[Freeipa-users] group issue (freeipa4)

2015-03-04 Thread Łukasz Jaworski
Hello, I have group issue on sssd 1.8.6 and 1.11.5 (on ubuntu 12.04 and 14.04) and freeipa4 (freeipa-server-4.1.2-1 on fedora 21, 389-ds-base-1.3.3.8-1). If user has assigned Role I couldn't get all groups with "id" command. All works for users without role/special permissions. Information abou