<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 03/24/2015 05:08 PM, Guertin, David
S. wrote:<br>
</div>
<blockquote
cite="mid:e4bc865a3a3048a9bf245d28c4920ee9@greyhound.middlebury.edu"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal">I have three IPA servers set up (master and
two replicas) and they’re all behaving normally. AD users can
log in, AD group restrictions are honored, etc. Now I’m trying
to set up clients, and running into problems. I have three
clients set up, and all three behave differently.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">On one of the clients, users can log in
like they can on the servers. On the other two, users can’t
log in, but these two behave differently from each other.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Client 1 and servers (this is correct):<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"># id 'MIDD\juser'<o:p></o:p></p>
<p class="MsoNormal">uid=435021613(<a class="moz-txt-link-abbreviated" href="mailto:juser@middlebury.edu">juser@middlebury.edu</a>)
gid=435021613(<a class="moz-txt-link-abbreviated" href="mailto:juser@middlebury.edu">juser@middlebury.edu</a>)
groups=435021613(<a class="moz-txt-link-abbreviated" href="mailto:juser@middlebury.edu">juser@middlebury.edu</a>),435330225(computer
science lab
<a class="moz-txt-link-abbreviated" href="mailto:login@middlebury.edu">login@middlebury.edu</a>),435231589(<a class="moz-txt-link-abbreviated" href="mailto:fmp_ms_eventschedule_users@middlebury.edu">fmp_ms_eventschedule_users@middlebury.edu</a>),435208664(miis
labfiles <a class="moz-txt-link-abbreviated" href="mailto:everyone@middlebury.edu">everyone@middlebury.edu</a>),435032463(mcms no
<a class="moz-txt-link-abbreviated" href="mailto:rights@middlebury.edu">rights@middlebury.edu</a>),435000513(domain
<a class="moz-txt-link-abbreviated" href="mailto:users@middlebury.edu">users@middlebury.edu</a>),435286826(<a class="moz-txt-link-abbreviated" href="mailto:netoperators@middlebury.edu">netoperators@middlebury.edu</a>),435461517(ipa<a
moz-do-not-send="true" href="mailto:users@middlebury.edu">users@middlebury.edu</a>)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Client 2 (AD groups are not listed):<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"># id 'MIDD\juser'<o:p></o:p></p>
<p class="MsoNormal">uid=435021613(<a class="moz-txt-link-abbreviated" href="mailto:juser@middlebury.edu">juser@middlebury.edu</a>)
gid=435021613(<a class="moz-txt-link-abbreviated" href="mailto:juser@middlebury.edu">juser@middlebury.edu</a>) groups=435021613(<a
moz-do-not-send="true" href="mailto:juser@middlebury.edu">juser@middlebury.edu</a>)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Client 3 (user not found):<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"># id 'MIDD\juser'<o:p></o:p></p>
<p class="MsoNormal">id: MIDD\juser: No such user<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">On each client I have cleared the sssd
cache (rm –f /var/lib/sss/db/*) and restarted sssd, with no
effect. I have also uninstalled and re-installed the client,
also with no effect.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">What else can I try?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">David Guertin<o:p></o:p></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
What are the platforms and package versions of SSSD on these
clients?<br>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>