Re: cannot find name for group ID

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



try adding
enumerate = true
to your sssd.conf clearing the cache and restart sssd.

regards,
Aaron

On 4/30/2014 8:51 AM, Enrico Morelli wrote:
Dear all,

I'm a new user about 389 DS. I installed it on a RHEL 6 (32bit) server:
89-admin-console-doc-1.1.8-1.el6.noarch
389-ds-1.2.2-1.el6.noarch
389-ds-base-1.2.11.15-32.el6_5.i686
389-ds-base-libs-1.2.11.15-32.el6_5.i686
389-ds-console-1.2.6-1.el6.noarch
389-admin-console-1.1.8-1.el6.noarch
389-dsgw-1.1.11-1.el6.i686
389-admin-1.1.35-1.el6.i686
389-adminutil-1.1.19-1.el6.i686
389-ds-console-doc-1.2.6-1.el6.noarch
389-console-1.1.7-1.el6.noarch

I've troubles with groups. I created posix user and group. I'm able to
login on the Linux client (SL 6 32bit) but I receive the error: cannot
find name for group ID.

I had search on google to find a solution, but all the suggestions I've
find didn't work for me.

This is the sssd.conf on the client, with all attempts to solve the
problem
-----------------------------------------------
[domain/default]
ldap_schema = rfc2307bis
ldap_id_use_start_tls = True
cache_credentials = True
ldap_search_base = dc=mydomain,dc=it
#krb5_realm = EXAMPLE.COM
#krb5_server = kerberos.example.com
id_provider = ldap
auth_provider = ldap
chpass_provider = ldap
ldap_uri = ldaps://myserver
ldap_tls_cacertdir = /etc/openldap/cacerts
entry_cache_timeout = 600
ldap_network_timeout = 3
#ldap_group_name = uniqueMember
ldap_group_object_class = groupofuniquenames
[sssd]
services = nss, pam
config_file_version = 2

domains = default
-----------------------------------------------------------------

If I add the member to the group through the management console
group->Members->Static Group, switch on the ldap_group_name =
uniqueMember parameter on the client, clear cache, restart sssd and
type id user I obtain:
uid=1001(morelli)
gid=1001(uid=morelli,cn=students,ou=Groups,dc=mydoman,dc=it)
groups=1001(uid=morelli,cn=students,ou=Groups,dc=mydomain,dc=it)

There is a way to solve the problem?
Thanks

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

[Index of Archives]     [Fedora User Discussion]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora News]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora QA]     [Fedora Triage]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Yosemite Photos]     [Linux Apps]     [Maemo Users]     [Gnome Users]     [KDE Users]     [Fedora Tools]     [Fedora Art]     [Fedora Docs]     [Maemo Users]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Fedora ARM]

  Powered by Linux