On Tue, Apr 23, 2019 at 12:03:20PM +0000, Ondrej Valousek wrote:
I just noticed that sssd is unable to detect any groups user belongs to after I set
Subdomains_provider = none
In my sssd.conf
Using AD provider, using token groups, not using fully qualified names.
Is this an expected behavior?
Note I switched subdomain_provider off as otherwise sssd keeps poking around and
requesting domain controllers which are not available.
btw this was solved by using ad_enabled_domains=joined.domain