[SSSD-users] Re: sssd id getent and secondary groups in active directory

2018-07-09 Thread Jakub Hrozek
On Mon, Jul 09, 2018 at 01:45:57PM +0200, John Hearns wrote: > One stupid question - is there an easy(ish) way to tell how deep a group > heirarachy exists on a particular site? I don't think so, without trying. However, looking at the code now, the default nesting limit is only two levels deep

[SSSD-users] Re: sssd id getent and secondary groups in active directory

2018-07-09 Thread Ratliff, John
On Fri, 2018-07-06 at 10:55 +0200, Sumit Bose wrote: > > this makes SSSD assume that the user is not a member of any group. > > Please try to set 'ldap_use_tokengroups=False' (see man sssd-ldap for > details) and check if the group memberships are reported more > reliable. > > Afaik the issue

[SSSD-users] Re: sssd id getent and secondary groups in active directory

2018-07-09 Thread John Hearns
One stupid question - is there an easy(ish) way to tell how deep a group heirarachy exists on a particular site? On 9 July 2018 at 13:36, Jakub Hrozek wrote: > On Fri, Jul 06, 2018 at 01:41:38PM +, Ratliff, John wrote: > > > > > > On Fri, 2018-07-06 at 10:55 +0200, Sumit Bose wrote: > > >

[SSSD-users] Re: sssd id getent and secondary groups in active directory

2018-07-09 Thread Jakub Hrozek
On Fri, Jul 06, 2018 at 01:41:38PM +, Ratliff, John wrote: > > > On Fri, 2018-07-06 at 10:55 +0200, Sumit Bose wrote: > > On Thu, Jul 05, 2018 at 08:09:55PM +, Ratliff, John wrote: > > > > > > > (Thu Jul 5 16:04:42 2018) [sssd[be[ads.iu.edu]]] [sdap_print_server] > > (0x2000):

[SSSD-users] Re: sssd id getent and secondary groups in active directory

2018-07-06 Thread Ratliff, John
On Fri, 2018-07-06 at 10:55 +0200, Sumit Bose wrote: > On Thu, Jul 05, 2018 at 08:09:55PM +, Ratliff, John wrote: > > > > (Thu Jul 5 16:04:42 2018) [sssd[be[ads.iu.edu]]] [sdap_print_server] > (0x2000): Searching 134.68.239.131:389 > (Thu Jul 5 16:04:42 2018) [sssd[be[ads.iu.edu]]] >

[SSSD-users] Re: sssd id getent and secondary groups in active directory

2018-07-06 Thread Sumit Bose
On Thu, Jul 05, 2018 at 08:09:55PM +, Ratliff, John wrote: > On Thu, 2018-07-05 at 21:44 +0200, Sumit Bose wrote: > > On Thu, Jul 05, 2018 at 07:36:19PM +, Ratliff, John wrote: > > > I'm using SSSD and realmd to join a machine to active directory. > > > > > > When I run id on my user, I

[SSSD-users] Re: sssd id getent and secondary groups in active directory

2018-07-05 Thread Sumit Bose
On Thu, Jul 05, 2018 at 07:36:19PM +, Ratliff, John wrote: > I'm using SSSD and realmd to join a machine to active directory. > > When I run id on my user, I only get the primary group. If I run getent > group "groupname", it works...sometimes. Other times, it returns blank. > > This is on a