search for: surpsising

...at can happen is that > >a user first (before given a rfc unixID) gets its uid from the > >idmap.ldb, but as soon as there is a unixid in the rfc > >attributes in his ldap object, that should always be used. > > > >This is a per-user thing. > > > >It is not surpsising that an externally configured sssd > >(configured to use rfc in a ad, and hence behaving more like > >a domain member) possibly gives different results, and also > >consistently uses the rfc attrs, since that one does not > >have the fallback to idmap.ldb that samba has. &gt...

...#39;t understand that yet. As explained in my previous mail, what can happen is that a user first (before given a rfc unixID) gets its uid from the idmap.ldb, but as soon as there is a unixid in the rfc attributes in his ldap object, that should always be used. This is a per-user thing. It is not surpsising that an externally configured sssd (configured to use rfc in a ad, and hence behaving more like a domain member) possibly gives different results, and also consistently uses the rfc attrs, since that one does not have the fallback to idmap.ldb that samba has. The mapping should indeed be consisten...

...lained in my previous mail, what can happen is that > a user first (before given a rfc unixID) gets its uid from the > idmap.ldb, but as soon as there is a unixid in the rfc > attributes in his ldap object, that should always be used. > > This is a per-user thing. > > It is not surpsising that an externally configured sssd > (configured to use rfc in a ad, and hence behaving more like > a domain member) possibly gives different results, and also > consistently uses the rfc attrs, since that one does not > have the fallback to idmap.ldb that samba has. sssd's uses its...

...>> a user first (before given a rfc unixID) gets its uid from the >>> idmap.ldb, but as soon as there is a unixid in the rfc >>> attributes in his ldap object, that should always be used. >>> >>> This is a per-user thing. >>> >>> It is not surpsising that an externally configured sssd >>> (configured to use rfc in a ad, and hence behaving more like >>> a domain member) possibly gives different results, and also >>> consistently uses the rfc attrs, since that one does not >>> have the fallback to idmap.ldb tha...

On 2015-11-07 at 12:37 +0000, Rowland Penny wrote: > On 07/11/15 11:31, Jonathan Hunter wrote: > >On 7 November 2015 at 10:11, Rowland Penny <rowlandpenny241155 at gmail.com> wrote: > >>Is it possible that sssd is failing? > >>What do you have in /etc/nsswitch? > ># cat /etc/nsswitch.conf | egrep "(passwd|group)" > >passwd: files sss >