[SSSD-users] Re: Group caching issue

2023-06-28 Thread Spike White
Vivianne, Is this with a simple AD forest (single domain)? We see lost memberships for accounts sporadically too, but only for cross-domain accounts. (another domain, same forest). And it does not occur nearly as frequently as you -- might be a single account once every 5 hrs. Like you,

[SSSD-users] Group caching issue

2023-06-28 Thread vivianne
Hello, I'm using SSSD with LDAP and NSS enabled for user/group information. Originally, groups besides the primary group would be "forgotten"/no longer be present. Invalidating the cache with sss_cache -u (username) temporarily fixes it, and through testing I found it'd reoccur 5 minutes

[SSSD-users] Re: Override an attribute for all users?

2023-06-28 Thread Gökçe Aydos
I found it out: ``` override_homedir = /home/%u ``` More info: https://man.archlinux.org/man/sssd.conf.5#NSS_configuration_options --- There are many manual pages about sssd configuration options so I recommend having an overview first. Most important distinction for me was that the

[SSSD-users] Override an attribute for all users?

2023-06-28 Thread Gökçe Aydos
Due to historical reasons I have different parent directories for `homeDirectory`, e.g., ``` /home/u1 /home-xx/u2 ``` I want to map all of them to `home`. In `nslcd` it is possible by using: ``` map    passwd homeDirectory  "/home/$uid" ``` Is it possible to override an attribute for