I am using sssd package from:
http://mirror.centos.org/centos-6/6/os/x86_64/Packages/

[root@etl4 ~]# rpm -qa | grep sssd
sssd-1.9.2-129.el6.x86_64
sssd-client-1.9.2-129.el6.x86_64

According to the logs each of the three login attempts has a different problematic group.
That hints at some other problem than a problem with a specific group...

Kristjan


On Thu, Aug 28, 2014 at 8:23 PM, Jakub Hrozek <jhrozek@redhat.com> wrote:
On Thu, Aug 28, 2014 at 07:56:04PM +0300, Kristjan Elias wrote:
> Hi,
>
> My rhel version is:
> [root@etl4 ~]# cat /etc/redhat-release
> Red Hat Enterprise Linux Server release 6.2 (Santiago)

I'm puzzled, are you running some SSSD version built from source or did
you just upgraded the sssd packages perhaps? The tokenGroups support was
new in 6.4..

> [root@etl4 ~]# uname -a
> Linux etl4 2.6.32-279.19.1.el6.x86_64 #1 SMP Sat Nov 24 14:35:28 EST 2012
> x86_64 x86_64 x86_64 GNU/Linux
>
> Indeed I need to avoid joining the hosts to the domain.
>
> To describe the group topology is quite difficult as it is a huge corporate
> domain and i am not strictly aware of all the groups.
> Do you have more specific questions about that?

According to the logs, the Group FTE_europe_2 is causing problems in
particular, anything strange or different about that group?
_______________________________________________
sssd-users mailing list
sssd-users@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users