-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/17/2010 07:57 AM, Andy Kannberg wrote:
> Hi,
> 
> I've checked the uid from the user, it is far above 1000, so that can
> not be the issue.
> 

It might not just be the LDAP UID. If the user's primary GID is below
1000, it will still fail.

I think at this point you'll want to turn on the debug logs and check
those. Add 'debug_level = 9' to the /etc/sssd/sssd.conf in the
[domain/LDAP] section and restart the SSSD.

Then attempt to log in again, and check /var/log/sssd/sssd_LDAP.log for
any indication about why it failed. (Ideally, sanitize any sensitive
server names/IPs and then send the log for us to look at).
- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkxqeicACgkQeiVVYja6o6OAbACghigY382PhA+X9VNireNoYYV1
UtQAnRBjKO41qENdrmSlKxtSweYpIjKW
=E78U
-----END PGP SIGNATURE-----
_______________________________________________
sssd-devel mailing list
sssd-devel@lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/sssd-devel

Reply via email to