Hi all.

Just installed Fedora and I am trying to setup authentication with our LDAP server. I followed the convenient authentication installation instructions (I am using TLS / no SASL). Unfortunately authentication was not working, so I decided to see if get first get nsswitch going and found about your sssd daemon. Any way here are the pertinent lines from from nsswitch.conf

passwd: files sss shadow: files sss group: files sss

The command getent passwd cochran did not work until I tweaked the sssd.conf file (sort of guessing here); Here are the tweeks

domains = LDAP #domains = LOCAL,LDAP

[domain/LDAP] id_provider = ldap auth_provider = ldap ldap_uri = ldap://encs-nexus.vancouver.wsu.edu ldap_user_search_base = dc=encs,dc=vancouver,dc=wsu,dc=edu ldap_tls_reqcert = demand cache_credentials = true enumerate = true

Now the following works (it gets the correct info from LDAP):

getent passwd cochran cochran:*:10001:10099::/home/cochran:/bin/bash

but alas the command getent group faculty does *not* work

Running sssd in debug mode usr/sbin/sssd -i -d 5 reveals the following

(Thu Aug 5 09:41:49 2010) [sssd[nss]] [accept_fd_handler] (4): Client connected! (Thu Aug 5 09:41:49 2010) [sssd[nss]] [sss_cmd_get_version] (5): Received client version [1]. (Thu Aug 5 09:41:49 2010) [sssd[nss]] [sss_cmd_get_version] (5): Offered version [1]. (Thu Aug 5 09:41:49 2010) [sssd[nss]] [nss_cmd_getgrnam] (4): Requesting info for [faculty] from [<ALL>] (Thu Aug 5 09:41:49 2010) [sssd[nss]] [nss_cmd_getgrnam] (4): Requesting info for [faculty@LDAP] (Thu Aug 5 09:41:49 2010) [sssd[nss]] [sss_dp_send_acct_req_create] (4): Sending request for [LDAP][4098][1][name=faculty] (Thu Aug 5 09:41:49 2010) [sssd[be[LDAP]]] [be_get_account_info] (4): Got request for [4098][1][name=faculty] (Thu Aug 5 09:41:49 2010) [sssd[be[LDAP]]] [groups_get_delete] (2): Group (faculty) delete returned 2 (No such file or directory) (Thu Aug 5 09:41:49 2010) [sssd[be[LDAP]]] [acctinfo_callback] (4): Request processed. Returned 0,0,Success (Thu Aug 5 09:41:49 2010) [sssd[nss]] [sss_dp_get_reply] (4): Got reply (0, 0, Success) from Data Provider (Thu Aug 5 09:41:49 2010) [sssd[nss]] [nss_cmd_getgrnam_callback] (2): No matching domain found for [faculty], fail! (Thu Aug 5 09:41:49 2010) [sssd[nss]] [nss_cmd_getgrnam_callback] (2): No results for getgrnam call (Thu Aug 5 09:41:49 2010) [sssd[nss]] [client_recv] (5): Client disconnected!

I have not clue what to change now. Any help would be greatly appreciated. I am not a hard core sysadmin (budget cuts have me setting this up myself).

--w

Wayne O. Cochran Assistant Professor Computer Science wcochran@vancouver.wsu.edu