On Wed, Jun 29, 2011 at 7:14 PM, Brian J. Atkisson <[email protected]> wrote:
> Do 'id' and 'getent group <user>' report the same thing, both as the
> user and as root?

As root the amount of groups is correct. As the user they are not.

> I would suspect issues with your LDAP
> configuration.  I have seen 'id' and 'getent group' report different
> results depending on how groups are defined in LDAP.  For example:
> [ldif showing memberUid as user,user,user]
> [ldif showing memberUid: User, memberUid: User ...]

> On the second example, id and getent groups will match results, but id
> will not be able to retrieve results on the first example (in the
> default RHEL5 config).

Fortunately, I am using the second format. It works for everyone else,
and this user, when he logs into his own machine via SSH.

> Also, you might want to look at if your client system is binding to
> the LDAP server as an authenticated user vs. anonymous bind.

Our setup uses anonymous binds.
_______________________________________________
Tech mailing list
[email protected]
https://lists.lopsa.org/cgi-bin/mailman/listinfo/tech
This list provided by the League of Professional System Administrators
 http://lopsa.org/

Reply via email to