[SSSD-users] Re: SSSD Client Auth on LDAP Server -both Client & Server CentOS6.7

2016-01-26 Thread Murdoch, Steven
Hi Lukas, I setup LDAP from scratch, as my sole intention at this point is to test SSSD Auth LDAP in out test lab environment. So the 2 VM's both Centos, are only test machines - when working I will take notes for the production environment later. Thanks -Original Message- From:

[SSSD-users] speeding up iterative enumeration?

2016-01-26 Thread James Ralston
We are using the ad provider for sssd, with the id mapping feature enabled. We have a program that obtains a list of all Active Directory users and groups via LDAP, and then calls getpwnam()/getgrnam() on those users and groups. (We used to accomplish this enumeration simply by enabling

[SSSD-users] Re: SSSD Client Auth on LDAP Server -both Client & Server CentOS6.7

2016-01-26 Thread Murdoch, Steven
Hi Sumit - The good news is - # getent passwd is now working - I can see all my LDAP users: . rpc:x:32:32:Rpcbind Daemon:/var/cache/rpcbind:/sbin/nologin rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin

[SSSD-users] disable ad backend group filtering? (was Re: Re: speeding up iterative enumeration?)

2016-01-26 Thread James Ralston
On Tue, Jan 26, 2016 at 3:03 PM, Jakub Hrozek wrote: > On Tue, Jan 26, 2016 at 02:19:42PM -0500, James Ralston wrote: > >> Here's the problem: unless the user/group objects already happen to be >> in sssd's cache, enumerating the passwd/group entries in this way is >> very