[SSSD-users] Re: net groups with IPA

2017-11-09 Thread Lukas Slebodnik 
On (08/11/17 20:53), Charles Hedrick wrote:
>We want to move our net groups from NIS to IPA. I’ve loaded the groups. 
>They’re visible on a system that uses nslcd pointed at the IPA server. But the 
>systems that use SSSD for authentication don’t show anything. The net groups 
>all show as undefined.
>
>I’ve turned on debugging and looked at the LDAP logs. It does the right quotes 
>and the log says it extracts the members. But they don’t show up.
>
>Any idea where to look?
>

How did you add netgroups to IPA?
Did you migrate from LDAP to IPA ("ipa migrate-ds")

Did you add them from command line with "ipa"?
if yes then could you provide exact commands ?

LS
___
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org

[SSSD-users] Re: SSSD and SUDO not working

2017-11-09 Thread Lukas Slebodnik 
On (08/11/17 16:01), Andrea Passuello wrote:
>Hi all,
>I use SSSD with OpenLDAP and I am able to authenticate users.
>I am trying to configure SSSD for managing and caching sudo but I can't use
>sudo and the system reply me with this:
>
>Sorry, user xxx is not allowed to execute '/usr/bin/apt-get update' as root
>on MACHINE.
>
A) ensure that you have right version of sudo installed on debian/ubuntu
   It need to be compiled with sssd support
   sudo --version | grep sssd

B) Please follow following troubleshooting page
https://docs.pagure.org/SSSD.sssd/users/sudo_troubleshooting.html

LS
___
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org

[SSSD-users] Re: [SSSD] Re: [Freeipa-interest] Announcing SSSD 1.16.0

2017-11-09 Thread Lukas Slebodnik 
On (23/10/17 21:33), Michael Ströder wrote:
>Jakub Hrozek wrote:
>> On Mon, Oct 23, 2017 at 09:19:21PM +0200, Michael Ströder wrote:
>>> Jakub Hrozek wrote:
 On Mon, Oct 23, 2017 at 08:46:08PM +0200, Michael Ströder wrote:
> Has anything changed with building the man pages?
>
> I'm asking because I now get formatting markup in the output of man (see
> below).

 No, not that I'm aware of. You render the man pages locally, right,
 because the tarball only contains the XML sources?
>>>
>>> I'm looking at the man pages generated by the RPM build on openSUSE
>>> build server which IIRC used to work up to sssd release 1.15.2:
>>>
>>> https://build.opensuse.org/package/view_file/home:stroeder:branches:network:ldap/sssd/sssd.spec?expand=1
>> 
>> Nothing changed there for a long time.. If you build the last-known-good
>> (so, 1.15.2) tarball in exactly the same build root, the man pages are
>> rendered fine?
>
>Ummpf! It seems that the man pages were broken recently even for the
>1.15.2 builds.
>
>Any hints which man build tools to check?
>Related build dependencies seem to be:
>
>BuildRequires:  docbook-xsl-stylesheets
>BuildRequires:  libxml2-tools
>BuildRequires:  libxslt-tools
>
Hello,

have you found the bug?
Because I've just tried with latest openSUSE Tumbleweed
and it is still broken.

Does it work on openSUSE Leap?

LS
___
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org