status of sssd bug 1432982

[Spike White]

All,

Is sssd bug 1432982 still existing?
https://bugzilla.redhat.com/show_bug.cgi?id=1432982



I’m testing on RHEL7.x , sssd RPM version 1.16.0-19.el7.x86_64.  I seem to
be hitting this bug.

Only the primary group is being returned.

Just as in the bug notes, if I set  ldap_use_tokengroups = false, then I
see all expected groups for a user.  That leads me to believe this RPM
version has this bug.

Honestly, it’s not a big deal for us;  we don’t rely on nested subgroups in
AD.   So this bug work-around is perfectly fine for us.

Just mainly curious as to current status of bug – if fixed in newer SSSD
versions.



Spike White

[Max DiOrio]

If you read the entire bug report, the issue was incorrect security settings on the user
account, not being able to read the right info from AD.  This wasn’t a bug in SSSD.  Maybe
you’re not seeing the same symptoms?



>  On May 18, 2018, at 11:19 AM, Spike White
> <spikewhitetx(a)gmail.com&gt; wrote:
>  
>  All,
>  
>  Is sssd bug 1432982 still existing?   
> https://bugzilla.redhat.com/show_bug.cgi?id=1432982
> <https://bugzilla.redhat.com/show_bug.cgi?id=1432982>
>   
>  I’m testing on RHEL7.x , sssd RPM version 1.16.0-19.el7.x86_64.  I seem to be hitting
> this bug. 
>  
>  Only the primary group is being returned.
>  
>  Just as in the bug notes, if I set  ldap_use_tokengroups = false, then I see all expected
> groups for a user.  That leads me to believe this RPM version has this bug.
>  
>  Honestly, it’s not a big deal for us;  we don’t rely on nested subgroups in AD.   So this
> bug work-around is perfectly fine for us.
>  
>  Just mainly curious as to current status of bug – if fixed in newer SSSD versions.
>  
>   
>  Spike White
>  
>  
>  _______________________________________________
>  sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]...