Re: [SSSD-users] simple_allow_groups does not work: 4 (system error )

[Domenico Viggiani]

> -----Original Message-----
> From: Domenico Viggiani [mailto:[e-mail]]
> > -----Original Message-----
> >
> > Then I'm 100% sure we have a bug. The group shouldn't have the non-
> > posix flag after it was updated.
> >
> > Can you tell us anything about this group:
> > (Mon Mar 16 16:57:52 2015) [sssd[be[MYDOMAIN.COM]]] [sdap_save_group]
> > (0x1000): Mapping group [Organigramma] objectSID [S-1-5-21-
>
> 2248061571-
> > 2151176789-1472819363-28039] to unix ID
> >
> > Is it from the same domain? What type does the group have?
>
> Searching for name "Organigramma", I get three results:
>
> dn: OU=Organigramma,OU=Liste di Distribuzione,DC=mydomain,DC=COM
> ...

Jakub,
sorry for disturbance: had you a chance to review this problem?
We are currently forced to allow login to all users on Red Hat 7 boxes.

Do you suggest to open a 'parallel' ticket with Red Hat?

Thanks
--

simple_allow_groups does not work: 4 (system error )

[Jakub Hrozek]

On Wed, Mar 18, 2015 at 09:27:13AM +0100, Domenico Viggiani wrote:
> > -----Original Message-----
> > From: Domenico Viggiani [mailto:[e-mail]]
> > > -----Original Message-----
> > >
> > > Then I'm 100% sure we have a bug. The group shouldn't have the non-
> > > posix flag after it was updated.
> > >
> > > Can you tell us anything about this group:
> > > (Mon Mar 16 16:57:52 2015) [sssd[be[MYDOMAIN.COM]]] [sdap_save_group]
> > > (0x1000): Mapping group [Organigramma] objectSID [S-1-5-21-
> >
> > 2248061571-
> > > 2151176789-1472819363-28039] to unix ID
> > >
> > > Is it from the same domain? What type does the group have?
> >
> > Searching for name "Organigramma", I get three results:
> >
> > dn: OU=Organigramma,OU=Liste di Distribuzione,DC=mydomain,DC=COM
> > ...
>
> Jakub,
> sorry for disturbance: had you a chance to review this problem?

Not yet, sorry.
> We are currently forced to allow login to all users on Red Hat 7 boxes.
>
> Do you suggest to open a 'parallel' ticket with Red Hat?

Please do, thanks.