Hi,

No problem for the delay, I am happy to have any help.  Here is my sssd.conf:


[autofs]
debug_level=10

[krb5]
debug_level=10

[nss]
filter_groups = root
filter_users = root
reconnection_retries = 3
debug_level=10

[pam]
reconnection_retries = 3
debug_level=10

[sssd]
domains = domain.ca
config_file_version = 2
services = nss, pam, ssh, autofs
debug_level=10

[domain/domain.ca]
ad_domain = domain.ca
krb5_realm = DOMAIN.CA
realmd_tags = manages-system joined-with-adcli 
cache_credentials = True
id_provider = ad
krb5_store_password_if_offline = True
default_shell = /bin/bash
ldap_id_mapping = True
#use_fully_qualified_names = True
override_homedir = /NAS/home/%u
fallback_homedir = /home/%u
access_provider = simple
debug_level=10
ignore_group_members=True
simple_allow_groups = perform_hpc

I joined this machine to the domain using realmd

Thomas

________________________________________
From: Jakub Hrozek <[email protected]>
Sent: Tuesday, October 24, 2017 3:48 PM
To: [email protected]
Subject: [SSSD-users] Re: loss of id / i have no name!

On Mon, Oct 23, 2017 at 02:20:13PM +0000, Thomas Beaudry wrote:
> Hi,
>
> The user is:  j_huc  uid:  891461586

(I'm sorry about the delay)

Yes, that ID appears to have some issues:
    (Fri Oct 20 14:04:27 2017) [sssd[be[domain.ca]]] [be_get_account_info] 
(0x0200): Got request for [0x1001][FAST BE_REQ_USER][1][idnumber=891461586]
    (Fri Oct 20 14:04:27 2017) [sssd[be[domain.ca]]] [be_req_set_domain] 
(0x0400): Changing request domain from [domain.ca] to [domain.ca]
    (Fri Oct 20 14:04:27 2017) [sssd[be[domain.ca]]] [ad_account_can_shortcut] 
(0x0080): Mapping ID [891461586] to SID failed: [IDMAP domain not found]
    (Fri Oct 20 14:04:27 2017) [sssd[be[domain.ca]]] [users_get_send] (0x0080): 
[891461586] did not match any configured ID mapping domain

Could you share your sssd.conf file, sanitized, if needed?
_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to