> On 1 Jun 2018, at 22:10, David Potterveld wrote:
>
> I'm not sure that we do need it…
Then removing the local domain is also a valid workaround for this issue.
> I think it was put in the config as a placeholder for old accounts on legacy
> systems when deciding on how UID ranges should be
I'm not sure that we do need it... I think it was put in the config as a
placeholder for old accounts on legacy systems when deciding on how UID ranges
should be mapped when we ultimately migrate to a FreeIPA domain that trusts our
AD forest. We're having some issues getting permission from the
This is a bug that was fixed recently upstrea, but not in RHEL/centos yet.
Do you actually use the local domain?
> On 1 Jun 2018, at 18:47, David Potterveld wrote:
>
> I'm having an issue with sssd failing to look up user or group names from an
> AD provider. The error occurs on both modern F