[Freeipa-users] IPA clients doesn't see all user's group
Jakub Hrozek
jhrozek at redhat.com
Wed Jul 31 11:57:29 UTC 2013
On Wed, Jul 31, 2013 at 02:29:13PM +0300, Vitaly wrote:
> >What exact SSSD version is this?
> 1.5.1-58.el5 and 1.5.1-66.el6_2.3
The .el5 version looks OK to me, but you should really upgrade from
6.2..
>
> >Was user added to group3 recently so that the cache might have stale records?
> Originally it was "old" group; after that I added some new group - the
> same problem.
> I restarted sssd with removing its cache - didn't help.
>
Ah, OK, thank you for verifying this.
> >Do you see the same problem on both RHEL5 and RHEL6 clients?
> yes
>
Interesting, can you run ipa user-show --all --raw myuser and check if
all three groups are visible as values of the "memberof" attribute? I
suspect they will..
If they do, can you then put debug_level=7 to the [domain] section of
sssd.conf, restart sssd and attach or paste the logs from /var/log/sssd
?
More information about the Freeipa-users
mailing list