Hey Spike,

We have old images of our affected HPC nodes and I tried a couple different older images on the nodes and then updating things other than sssd and I was running into inconsistency issues where it would sometimes return results from other domains in the forest and sometimes not.   Clearing the cache seemed to remove the ability to look those users up and I wasn't sure if it was related to the head node or some other interaction issue.  In the interests of moving forward on the problem I was having I sidestepped it by creating duplicate accounts for those users in our AD Domain and having them use those credentials.  It might create some potential headaches in the future if we want to 'merge' their current temp account with their real account at a different campus, but that will have to be after the cent7 sssd packages get fixed.  And now, at least they can get on and use the resources.

Bill
_______________________________________________
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure