Re: [Freeipa-users] Group membership not populated

2014-11-17 Thread Darren Poulson
That seems to have done the trick. Many thanks to all who helped. Now to deploy this thing! :D From: Lukas Slebodnik [lsleb...@redhat.com] Sent: 15 November 2014 15:17 To: Darren Poulson Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] Group

Re: [Freeipa-users] Group membership not populated

2014-11-17 Thread Jakub Hrozek
On Fri, Nov 14, 2014 at 04:30:17PM +, Darren Poulson wrote: Ok, I've shoved them on pastebin. They were a bit big to put in a mailing list really. ldap_child.log: http://pastebin.com/qGCZF4vK sssd_nss.log: http://pastebin.com/gTBA8NEj sssd_bur.us.genops.log:

Re: [Freeipa-users] Group membership not populated

2014-11-17 Thread Jakub Hrozek
On Mon, Nov 17, 2014 at 05:59:15PM +0100, Jakub Hrozek wrote: On Fri, Nov 14, 2014 at 04:30:17PM +, Darren Poulson wrote: Ok, I've shoved them on pastebin. They were a bit big to put in a mailing list really. ldap_child.log: http://pastebin.com/qGCZF4vK sssd_nss.log:

Re: [Freeipa-users] Group membership not populated

2014-11-15 Thread Darren Poulson
Sorry, it seems I failed at cutting and pasting. sssd_bur.us.genops.log http://pastebin.com/7c5bH1Wq -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project

Re: [Freeipa-users] Group membership not populated

2014-11-15 Thread Lukas Slebodnik
On (15/11/14 15:01), Darren Poulson wrote: Sorry, it seems I failed at cutting and pasting. sssd_bur.us.genops.log http://pastebin.com/7c5bH1Wq Thank you very much for log file. It is know bug: https://fedorahosted.org/sssd/ticket/2471 https://bugzilla.redhat.com/show_bug.cgi?id=1154042

[Freeipa-users] Group membership not populated

2014-11-14 Thread Darren Poulson
Hi, I'm currently having an issue where if I log in as a user on a freshly rebooted machine, their group membership is not populated, so things like sudo do not work properly. If I do a getent group group, log out and log back in again, then it works properly. for example -sh-4.1$ groups

Re: [Freeipa-users] Group membership not populated

2014-11-14 Thread Jakub Hrozek
On Fri, Nov 14, 2014 at 12:10:59PM +, Darren Poulson wrote: Hi, I'm currently having an issue where if I log in as a user on a freshly rebooted machine, their group membership is not populated, so things like sudo do not work properly. If I do a getent group group, log out and log

Re: [Freeipa-users] Group membership not populated

2014-11-14 Thread Darren Poulson
From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Jakub Hrozek [jhro...@redhat.com] Sent: 14 November 2014 14:56 To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] Group membership not populated On Fri, Nov 14, 2014 at 12:10:59PM +, Darren

Re: [Freeipa-users] Group membership not populated

2014-11-14 Thread Jakub Hrozek
On Fri, Nov 14, 2014 at 03:07:29PM +, Darren Poulson wrote: From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Jakub Hrozek [jhro...@redhat.com] Sent: 14 November 2014 14:56 To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] Group

Re: [Freeipa-users] Group membership not populated

2014-11-14 Thread Darren Poulson
OK, if the user is a direct member of the groups and the groups are all POSIX (=they all have a GID), then I would expect the group membership to show all users. Can you try setting ldap_deref_threshold=0 and re-running the test? It would also be best if you could remove the sssd cache

Re: [Freeipa-users] Group membership not populated

2014-11-14 Thread Jakub Hrozek
On Fri, Nov 14, 2014 at 03:38:47PM +, Darren Poulson wrote: OK, if the user is a direct member of the groups and the groups are all POSIX (=they all have a GID), then I would expect the group membership to show all users. Can you try setting ldap_deref_threshold=0 and re-running

Re: [Freeipa-users] Group membership not populated

2014-11-14 Thread Darren Poulson
, Darren. From: Jakub Hrozek [jhro...@redhat.com] Sent: 14 November 2014 15:57 To: Darren Poulson Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] Group membership not populated On Fri, Nov 14, 2014 at 03:38:47PM +, Darren Poulson wrote: OK

Re: [Freeipa-users] Group membership not populated

2014-11-14 Thread Lukas Slebodnik
On (14/11/14 16:30), Darren Poulson wrote: Ok, I've shoved them on pastebin. They were a bit big to put in a mailing list really. ldap_child.log: http://pastebin.com/qGCZF4vK sssd_nss.log: http://pastebin.com/gTBA8NEj sssd_bur.us.genops.log: http://pastebin.com/ithUqb1z