Hi, That assumption appears to be correct:
[r...@hpdw0001 ~]# ldapsearch -x -H ldap://dtc0001.dtq.nl-htc01.nxp.com -b ou=TST_EMEA_NL-TST01,ou=Locations,ou=NXDI,o=NXP "(&(uid=nxp21358)(objectclass=posixAccount))" # extended LDIF # # LDAPv3 # base <ou=TST_EMEA_NL-TST01,ou=Locations,ou=NXDI,o=NXP> with scope subtree # filter: (&(uid=nxp21358)(objectclass=posixAccount)) # requesting: ALL # # search result search: 2 result: 0 Success # numResponses: 1 The user does exist, but does not have an objectClass of posixAccount. Is this something that can be fixed ? cheers, Andy 2010/8/17 Stephen Gallagher <sgall...@redhat.com> > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 08/17/2010 08:55 AM, Andy Kannberg wrote: > > hi again, > > > > GID was 1000, so changed the min_id to 1. > > Also added the debug line to sssd.conf, and this is what is logged when > > logging in : > > > ... > > > According to this, the ldapsearch for this user returned no results. > Either this user doesn't exist underneath the LDAP search base, or the > user does not have an objectClass of posixAccount. > > What is the output of: > ldapsearch -x -H ldap://ldap.xxx.com \ > - -b ou=TST_EMEA_NL-TST01,ou=Locations,ou=NXDI,o=NXP \ > "(&(uid=nxp21358)(objectclass=posixAccount))" \ > objectClass > > You may need to install the openldap-clients package for that. > > - -- > Stephen Gallagher > RHCE 804006346421761 > > Delivering value year after year. > Red Hat ranks #1 in value among software vendors. > http://www.redhat.com/promo/vendor/ > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2.0.14 (GNU/Linux) > Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ > > iEYEARECAAYFAkxqicAACgkQeiVVYja6o6PbkACgoiWb7Q/WZhIJgQgErVCx5cvO > HRIAn0MYKCjomu5fILlihuWI+SIenvN/ > =sqv0 > -----END PGP SIGNATURE----- > _______________________________________________ > sssd-devel mailing list > sssd-devel@lists.fedorahosted.org > https://fedorahosted.org/mailman/listinfo/sssd-devel >
_______________________________________________ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://fedorahosted.org/mailman/listinfo/sssd-devel
