On Thu, Jul 05, 2018 at 07:36:19PM +0000, Ratliff, John wrote: > I'm using SSSD and realmd to join a machine to active directory. > > When I run id on my user, I only get the primary group. If I run getent > group "groupname", it works...sometimes. Other times, it returns blank. > > This is on a CentOS 7 machine (sssd 1.16.0) > > $ id jdratlif > uid=752603752(jdratlif) gid=1572000513(domain users) > groups=1572000513(domain users) > > $ getent group ssh-test-users2 > ssh-test-users2:*:752629809:
What is the scope is the group ('domain local', 'global' or 'universal')? Did you log in as jdratlif before running those commands? > > $ sss_cache -E > $ getent group ssh-test-users2 > ssh-test-users2:*:752629809:jdratlif > > $ id jdratlif > uid=752603752(jdratlif) gid=1572000513(domain users) > groups=1572000513(domain users) > > $ getent group ssh-test-users2 > ssh-test-users2:*:752629809: > > $ id jdratlif > uid=752603752(jdratlif) gid=1572000513(domain users) > groups=1572000513(domain users) > > This was all in the span of 2 minutes. > > Let me know what other information would be helpful. Debug logs with debug_level=9 would be helpful, especially the domain logs and the sssd_nss.log. Please see https://docs.pagure.org/SSSD.sssd/users/troubleshooting.html for details. bye, Sumit > > Thanks. > > -- > John Ratliff > Research Storage / UITS / Pervasive Technology Institute > Indiana University | https://pti.iu.edu > _______________________________________________ > sssd-users mailing list -- sssd-users@lists.fedorahosted.org > To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/sssd-users@lists.fedorahosted.org/message/TL3GCJ6M5MNYDHF5WIEXSAKZGRLVSPV2/ _______________________________________________ sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/sssd-users@lists.fedorahosted.org/message/LXDOGIQTLH7SV3NFSSPLVT2G57TQPD4T/