[Freeipa-users] idoverride-add gives incorrect, inconsistant results?

Simpson Lachlan Lachlan.Simpson at petermac.org
Tue Jan 19 00:23:39 UTC 2016


Since I got the service back up and running, I was continuing my tests/learning by following the steps on the V4 Migrating existing environments to Trust page:

http://www.freeipa.org/page/V4/Migrating_existing_environments_to_Trust#How_to_Test



[root at vmts-linuxidm ~]# id TestUser at co.org.au
uid=1750693931(testuser at co.org.au) gid=1750693931(testuser at co.org.au) groups=1750693931(testuser at co.org.au),1750687326(bioinf-staff at co.org.au)


Success and joy.


[root at vmts-linuxidm ~]# ipa idoverrideuser-add 'Default Trust View' testuser at co.org.au --uid 1506
-------------------------------------------------------
Added User ID override "testuser at co.org.au"
-------------------------------------------------------
  Anchor to override: testuser at co.org.au
  UID: 1506



Great.


[root at vmts-linuxidm ~]# sudo systemctl restart sssd 

[root at vmts-linuxidm ~]# id testuser at co.org.au
uid=1750693931(testuser at co.org.au) gid=1750693931(testuser at co.org.au) groups=1750693931(testuser at co.org.au),1750687326(bioinf-staff at co.org.au)


Huh? The documentation linked to above says that uid should now be 1506?

I went searching in the website - took me a while to find it, but it was there - see attached image. The uid had been updated *somewhere*, but the id command wasn't seeing it.

Maybe a full ipa restart would help?

Ipactl restart

And samba is failing again. Ouch. Brb.

L.




This email (including any attachments or links) may contain 
confidential and/or legally privileged information and is 
intended only to be read or used by the addressee.  If you 
are not the intended addressee, any use, distribution, 
disclosure or copying of this email is strictly 
prohibited.  
Confidentiality and legal privilege attached to this email 
(including any attachments) are not waived or lost by 
reason of its mistaken delivery to you.
If you have received this email in error, please delete it 
and notify us immediately by telephone or email.  Peter 
MacCallum Cancer Centre provides no guarantee that this 
transmission is free of virus or that it has not been 
intercepted or altered and will not be liable for any delay 
in its receipt.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: id_override_20160119.png
Type: image/png
Size: 48924 bytes
Desc: id_override_20160119.png
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20160119/e24a60c6/attachment.png>


More information about the Freeipa-users mailing list