[Freeipa-users] FreeIPA user ID differs

[Rob Crittenden]

Markus.Moj at mc.ingenico.com wrote:
> Hi Christopher, Hi Loris,
>
> The plugin is enabled
>
> ipa-compat-manage status
> Plugin Enabled
>
> When I request the id of a posix user on the freeipa server then I receive the output I expact with correct uid, gid and groups. But on a connected host, with freeipa client tools, I receive the old values. Are these values stored somewhere ?

sssd has its own cache. See the sssd man pages for all the knobs and 
sss_cache for wiping it.

rob

>
> -----Ursprüngliche Nachricht-----
> Von: Christopher Lamb [mailto:christopher.lamb at ch.ibm.com]
> Gesendet: Mittwoch, 5. August 2015 14:38
> An: Moj, Markus; Loris Santamaria
> Cc: freeipa-users at redhat.com
> Betreff: Re: [Freeipa-users] FreeIPA user ID differs
>
> Check also that the compat tree plugin is enabled, and enable it if not:
>
> ipa-compat-manage status
>
> ipa-compat-manage enable
>
> ipactl restart
>
> Cheers,
>
> Chris
>
>
> From:	Loris Santamaria <loris at lgs.com.ve>
> To:	freeipa-users at redhat.com
> Date:	05.08.2015 14:26
> Subject:	Re: [Freeipa-users] FreeIPA user ID differs
> Sent by:	freeipa-users-bounces at redhat.com
>
>
>
> Hi, the compat tree is generated dynamically based on the cn=accounts tree and from information retrieved by server-mode SSSD.
>
> If the compat tree gets out of sync, a restart of the ipa server and SSSD should fix it.
>
> Best regards
>
> El mié, 05-08-2015 a las 12:14 +0000, Markus.Moj at mc.ingenico.com
> escribió:
>> Hi Christopher,
>>
>> how to update the compat tree accordingly? Our developers edited the
>> values in FreeIPA but don´t see the nis id´s and therefore can´t edit
>> them.
>>
>> -----Ursprüngliche Nachricht-----
>> Von: Christopher Lamb [mailto:christopher.lamb at ch.ibm.com]
>> Gesendet: Dienstag, 4. August 2015 11:27
>> An: Moj, Markus
>> Cc: freeipa-users at redhat.com
>> Betreff: Re: [Freeipa-users] FreeIPA user ID differs
>>
>> Markus
>>
>> Have you checked both the cn=accounts and cn=compat trees?.  Users and
>> groups are stored in both, and both would need manipulation...
>>
>> Ciao
>>
>> Chris
>>
>>
>>
>> From:		 <Markus.Moj at mc.ingenico.com>
>> To:		 <freeipa-users at redhat.com>
>> Date:		 04.08.2015 11:14
>> Subject:		 [Freeipa-users] FreeIPA user ID differs
>> Sent by:		 freeipa-users-bounces at redhat.com
>>
>>
>>
>> Hi @all,
>>
>> I´ve encountered a strange „error“. I´ve created a user with a
>> generated UID from the predefined range. After creation I´ve had to
>> manipulate the UID to fit an old NIS configuration and set the UID to
>> the old NIS value.
>> FreeIPA shows the correct UID as well as ldapsearch. But if I logon
>> onto a host and enter `id <username>` I receive the old UID, GID and
>> groups information instead of the corrected one.
>>
>> Maybe someone can help me out to pinpoint the error and to fix it.
>>
>> Cheers,
>> Markus--
>> Manage your subscription for the Freeipa-users mailing list:
>> https://www.redhat.com/mailman/listinfo/freeipa-users
>> Go to http://freeipa.org for more info on the project
>>
> --
> Loris Santamaria   linux user #70506   xmpp:loris at lgs.com.ve
> Links Global Services, C.A.            http://www.lgs.com.ve
> Tel: 0286 952.06.87  Cel: 0414 095.00.10  sip:103 at lgs.com.ve
> ------------------------------------------------------------
> "If I'd asked my customers what they wanted, they'd have said a faster horse" - Henry Ford [attachment "smime.p7s" deleted by Christopher Lamb/Switzerland/IBM] -- Manage your subscription for the Freeipa-users mailing list:
> https://www.redhat.com/mailman/listinfo/freeipa-users
> Go to http://freeipa.org for more info on the project
>