[Freeipa-users] ID Views without AD

[Jakub Hrozek]

On Thu, Feb 11, 2016 at 11:17:01AM +0000, Mike Kelly wrote:
> On Thu, Feb 11, 2016 at 3:21 AM Alexander Bokovoy <abokovoy at redhat.com>
> wrote:
> 
> > On Wed, 10 Feb 2016, Mike Kelly wrote:
> > >On Wed, Feb 10, 2016 at 3:19 AM Alexander Bokovoy <abokovoy at redhat.com>
> > >wrote:
> > >
> > >> On Wed, 10 Feb 2016, Mike Kelly wrote:
> > >>
> > >> >Is there some extra logging I can turn on to see why this ID View isn't
> > >> >being applied like I would expect? Or perhaps some extra bit of
> > >> >configuration I missed?
> > >> Level 7 or 9 debug logs in SSSD on the client might help.
> > >>
> > >
> > >Thanks.
> > >
> > >Here's what looks like the relevant bits in /var/log/sssd/sssd_nss.log,
> > >after I ran `sss_cache -E ; id pioto`:
> > Please provide content of sssd_<domain>.log, this is where the actual
> > work is done when user information is obtained and processed.
> > sssd_nss.log is merely a requestor.
> >
> 
>  Thanks. Here's what is hopefully the relevant lines:

I'm sorry, but these logs only capture how the original entry was
searched, not the overrides. Can you capture the full logs since the
sssd startup? Also please make sure the cache was invalidated prior to
the request with sss_cache -E.