[SSSD-users] Re: sssd with sudo and non posix groups

2018-11-14 Thread Leonard Lawton
On 11/14/2018 12:28 AM, Jakub Hrozek wrote: On Tue, Nov 13, 2018 at 05:00:56PM -0800, Leonard Lawton wrote: I have a group in ldap(I'm using 389DS) called "_all" which has a groupofnames object class. Members are stored with the uniquemember attrtibute. The users in the group are able to login

[SSSD-users] disable querying trusted "foreign" domains

2018-11-14 Thread Michael Ströder
HI! I'm currently trouble-shooting performance issues on CentOS 6.10 running sssd 1.13.3 using sssd-ad as backend. Enumeration is already disabled. Also these options were set (DNS names obfuscated): ad_enabled_domains = ad1.example.com ad_server = dc1.ad1.example.com, dc2.ad1.example.com

[SSSD-users] Re: SSSD in AIX

2018-11-14 Thread Frank Pikelner
I would concur that SSSD on AIX would be very welcome as an OS option. Appreciate the effort. Frank Pikelner On Wed, Nov 14, 2018 at 4:36 AM Jakub Hrozek wrote: > > On Mon, Nov 12, 2018 at 05:24:54PM +0530, Ayappan wrote: > > On Mon, Nov 12, 2018 at 4:56 PM Jakub Hrozek wrote: > > > > > > On

[SSSD-users] Re: SSSD in AIX

2018-11-14 Thread Jakub Hrozek
On Mon, Nov 12, 2018 at 05:24:54PM +0530, Ayappan wrote: > On Mon, Nov 12, 2018 at 4:56 PM Jakub Hrozek wrote: > > > > On Mon, Nov 12, 2018 at 03:57:53PM +0530, Ayappan wrote: > > > Hi, > > > > > > I am from AIX OS development team here in IBM. We have some customers > > > who are interested in

[SSSD-users] Re: sssd with sudo and non posix groups

2018-11-14 Thread Jakub Hrozek
On Tue, Nov 13, 2018 at 05:00:56PM -0800, Leonard Lawton wrote: > I have a group in ldap(I'm using 389DS) called "_all" which has a > groupofnames object class. Members are stored with the uniquemember > attrtibute. The users in the group are able to login fine via ssh using this > setup. However,

[SSSD-users] Re: SSSD login delay

2018-11-14 Thread Jakub Hrozek
On Mon, Nov 12, 2018 at 04:25:30PM -, Jonathan Gray wrote: > Hello, > > We need help debugging this issue. > > For some servers we're experiencing over 10 second delay logging in with IPA > user. > Since the issue isn't present everywhere we're finding it hard to debug. > > > SSSD config