Re: [SSSD] Group results.

2010-12-10 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/10/2010 06:32 AM, Patrik Martinsson wrote: Hello, I've almost managed to get sssd to work as I want, however I have this problems with groupmembers. If I do an ldapsearch on a group I get this result, - member:

Re: [SSSD] Group results.

2010-12-10 Thread Patrik Martinsson
Hey again, Thanks for answering so quick! Ok. So I asked our Windowsdepartment what kind of RFC we are using today and got the answer Don't know if we satisfy any RFC today, the base is AD4Unix.. I don't really know what to make of that, however I do know that i want sssd to base

Re: [SSSD] Group results.

2010-12-10 Thread Simo Sorce
On Fri, 10 Dec 2010 15:58:08 +0100 Patrik Martinsson patrik.martins...@smhi.se wrote: Hey again, Thanks for answering so quick! Ok. So I asked our Windowsdepartment what kind of RFC we are using today and got the answer Don't know if we satisfy any RFC today, the base is AD4Unix.. I

Re: [SSSD] Group results.

2010-12-10 Thread Sumit Bose
On Fri, Dec 10, 2010 at 03:58:08PM +0100, Patrik Martinsson wrote: Hey again, Thanks for answering so quick! Ok. So I asked our Windowsdepartment what kind of RFC we are using today and got the answer Don't know if we satisfy any RFC today, the base is AD4Unix.. I don't really know what

Re: [SSSD] Group results.

2010-12-10 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/10/2010 01:36 PM, Martinsson Patrik wrote: 'memberOf' is the reverse of 'member', not of 'memberuid'. AD doesn't create the 'memberOf' backlink for entries specified by 'memberuid' (because 'memberuid' members are also not required to be in

Re: [SSSD] Group results.

2010-12-10 Thread Martinsson Patrik
Do the members a000569, a000680 and a000590 exist in the directory server if you look them up directly? If you mean like 'id a000569/a000680/a000590', then yes, if I remembered it correctly, I turned off my workcomputer so I cant comfirm it since I'm home now. If you mean like 'ldapsearch

Re: [SSSD] Group results.

2010-12-10 Thread Martinsson Patrik
Do they appear if you search using the filter: ((objectclass=User)(cn=a000569)) Yes. Since that's what you specified for ldap_user_object_class. Yes, well the user is of that objectClass, objectClass: top objectClass: person objectClass: organizationalPerson objectClass: user If