[Freeipa-users] Re: ID views/override issues for AD trust

[Sumit Bose]

Am Wed, May 12, 2021 at 11:25:38AM -0000 schrieb iulian roman via FreeIPA-users:
> > Am Wed, May 12, 2021 at 06:46:29AM -0000 schrieb iulian roman via FreeIPA-users:
> >
> > Hi,
> >
> > did you use the IPA 'unix_users' group as primary group for those users
> > and given the GID of 'unix_users' in the id-overrides for the users? Or
> > did you you a different group as primary group?
>
> No, unix_users is not primary group. The primary group is the one from
> AD (gidNumber) which is overridden in the view.

Hi,

can you check what are the results on the client if you call

getent group name_of_primary_group

and

getent group numeric_GID_of_primary_group

both with an empty cache, e.g. after calling:

systemctl stop sssd ; rm -rf /var/lib/sss/db/* ; systemctl start sssd

bye,
Sumit