> > is it expected or a misconfiguration on my test environment?
> I think it's expected, it just looks like some application (you can see
> its details referred to in the nss logs as 'client') is calling both
> getgrgid and getpwnam.

ok, I searched which application is requesting groups with gid instead of names:
systemctl stop sssd && rm -rf /var/lib/sss/db/* && systemctl start sssd && 
service autofs restart
cat sssd_domain.tld.log | egrep 
"ldap_search_ext.*sAMAccountName=[0-9].*objectClass=group" | tail -n 5

this log begans to fill with calling ldap_search_ext with 
[(&(sAMAccountName=10107)(objectClass=group) when autofs mounted a cifs share!
and one of my map is:
-fstype=cifs,sec=krb5,cruid=$UID,uid=$UID,username=$USER,noforceuid,gid=10107
man mount.cifs:
gid : It may be specified as either a groupname or a numeric gid

I think I will use groupnames in my maps now :) !
thank you!


_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to