[389-users] cannot find name for group ID

[Ssureshot]

try adding
enumerate = true
to your sssd.conf clearing the cache and restart sssd.

regards,
Aaron

On 4/30/2014 8:51 AM, Enrico Morelli wrote:
> Dear all,
>
> I'm a new user about 389 DS. I installed it on a RHEL 6 (32bit) server:
> 89-admin-console-doc-1.1.8-1.el6.noarch
> 389-ds-1.2.2-1.el6.noarch
> 389-ds-base-1.2.11.15-32.el6_5.i686
> 389-ds-base-libs-1.2.11.15-32.el6_5.i686
> 389-ds-console-1.2.6-1.el6.noarch
> 389-admin-console-1.1.8-1.el6.noarch
> 389-dsgw-1.1.11-1.el6.i686
> 389-admin-1.1.35-1.el6.i686
> 389-adminutil-1.1.19-1.el6.i686
> 389-ds-console-doc-1.2.6-1.el6.noarch
> 389-console-1.1.7-1.el6.noarch
>
> I've troubles with groups. I created posix user and group. I'm able to
> login on the Linux client (SL 6 32bit) but I receive the error: cannot
> find name for group ID.
>
> I had search on google to find a solution, but all the suggestions I've
> find didn't work for me.
>
> This is the sssd.conf on the client, with all attempts to solve the
> problem
> -----------------------------------------------
> [domain/default]
> ldap_schema = rfc2307bis
> ldap_id_use_start_tls = True
> cache_credentials = True
> ldap_search_base = dc=mydomain,dc=it
> #krb5_realm = EXAMPLE.COM
> #krb5_server = kerberos.example.com
> id_provider = ldap
> auth_provider = ldap
> chpass_provider = ldap
> ldap_uri = ldaps://myserver
> ldap_tls_cacertdir = /etc/openldap/cacerts
> entry_cache_timeout = 600
> ldap_network_timeout = 3
> #ldap_group_name = uniqueMember
> ldap_group_object_class = groupofuniquenames
> [sssd]
> services = nss, pam
> config_file_version = 2
>
> domains = default
> -----------------------------------------------------------------
>
> If I add the member to the group through the management console
> group->Members->Static Group, switch on the ldap_group_name =
> uniqueMember parameter on the client, clear cache, restart sssd and
> type id user I obtain:
> uid=1001(morelli)
> gid=1001(uid=morelli,cn=students,ou=Groups,dc=mydoman,dc=it)
> groups=1001(uid=morelli,cn=students,ou=Groups,dc=mydomain,dc=it)
>
> There is a way to solve the problem?
> Thanks

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20140430/5b549b18/attachment.html>