[SSSD-users] Re: SSSD strangeness

Hi, faced the same issue with some accounts that were migrated from another domain in an Active Directory Inter-Forest scenario. Removing SIDHistory for those accounts solved the problem! ___ sssd-users mailing list -- sssd-users@lists.fedorahosted.org

[SSSD-users] Re: SSSD strangeness

So - as an update, setting ignore_group_members = True Resolves our broken group issues (as well as giving a nice performance boost) Hope this helps someone! Simon ___ sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send

[SSSD-users] Re: SSSD strangeness

Sorry for any confusion - I mentioned Centos, but didn't mention - we're also running a later version of Red Hat as well (same symptoms - i.e., what looks like missing grpgid() for certain users) - hence the later 1.15 release mentioned above... Thanks Jakub - appreciate it.

[SSSD-users] Re: SSSD strangeness

Thanks Max - we have had some domain merging in the past. This is an old AD with a lot of history! We'll have a good look into this - much appreciated. ___ sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to

[SSSD-users] Re: SSSD strangeness

Thanks Jakub. Unfortunately we're on a mandated linux distro (RHEL/CentOS 7) so we're tied into their releases. Currently 1.15.2. We've definitely still got the groups issue. An id -G returns a table of numbers with no errors, an id -Gn doesn't. We get at least one missing group with 'cannot

[SSSD-users] Re: SSSD strangeness

Regarding your group issue, do you or have you had trusted domains and the mystery group is from another domain? Long shot, it we had the same error when it was trying to resolve the foreign group memberships. On Wed, Mar 14, 2018, 11:19 AM wrote: > Hi All > > We've got

[SSSD-users] Re: SSSD strangeness

The first step in debugging any strangeness is usually https://docs.pagure.org/SSSD.sssd/users/troubleshooting.html > On 14 Mar 2018, at 16:18, simon...@hotmail.com wrote: > > Hi All > > We've got SSSD 1.13.0 installed as part of a Centos 7.2.1511 installation. > But this is quite an old