On Sat, 2009-06-13 at 09:11 -0500, Doug Coats wrote: > I have run into a issue with my system being able to correctly > identify a user and their group. > > I am running CentOS 5.3 and centos-ds 8.1 > > I have created a user using the managment console. > > I set up the first name, last name, common name, user id, and > password. Under Posix User I set up UID Number: 10009, GID Number: > 10009, Home Directory: /home/user, and Shell: /bin/bash. > > I set up authentication using System > Administration > > Authentication. I enabled LDAP support and configured it. Under the > options tab I checke "Create home directories on first login." > > My user can log into the box and can ssh into the box. > > When I do log in I receive the following error. > > id: cannot find name for group ID 10009 > > When I ls -la the users home directory it displays. > > drwxr-xr-x 15 user 100009 4096 Jun 13 08:26 user > > I tried creating a "user" group but their is no way to attach a GID to > that group so there is no way for LDAP or PAM to associate the two. > > I googled around but none of the solutions worked for me or seemed to > apply to this situation. > > Thanks for any help! > > Doug <snip> > Since you were able to set the GID, I assume you added the posixGroup object class. You would need to do the same to a group in order to add a GID, I believe. As you probably already know, one would do this by adding a value to objectClass in the advanced properties. I wonder if it is just a matter of time, in other words, perhaps there was a group query before the GID was set and nscd cached it. The default group cache is 3600 seconds which is why we change it to 600 in nscd.conf. I think the command to flush the group cache is nscd -i group or groups. Other than that, I'm not sure. You could enable Access Logging and see what queries are being made. I've not found the log screens in centos_idm-console very helpful and typically just look at the access file in /var/log/dirsrv/slapd-xxx/. I do notice there is a substantial delay between when events occur and when they are written to the log. Hope this helps - John -- John A. Sullivan III Open Source Development Corporation +1 207-985-7880 jsullivan at opensourcedevel.com http://www.spiritualoutreach.com Making Christianity intelligible to secular society
