Sorry, I found it.

One time I used authconfig with --enablerfc2307bis, and then I removed the option from the command line assuming that it would be erased from the config.

The config still had the rfc2307bis.

Sorry :)




--
Felip Moll Marquès

Computer Science Engineer
E-Mail - lipixx@gmail.com
WebPage - http://lipix.ciutadella.es


2016-02-18 15:44 GMT+01:00 Felip Moll <lipixx@gmail.com>:
Hello,

I configured sssd with authconfig in a Centos 6. My users are shown perfectly with getent passwd, and my groups are shown, but empty.

I tried with debug 9 in [nss] section in sssd.conf but I found nothing relevant.

Also cleared cache (sss_cache -E), turned on/off enumerate, etc. Any advice on what to look for?


Fragment of sssd_nss.log:
-----------------------------------
...
(Thu Feb 18 15:21:12 2016) [sssd[nss]] [sss_ncache_check_str] (0x2000): Checking negative cache for [NCE/GROUP/default/usertest]
 (Thu Feb 18 15:21:12 2016) [sssd[nss]] [sss_ncache_check_str] (0x2000): Checking negative cache for [NCE/GROUP/default/devel]
....


rfc2307 LDAP setup - ldapsearch:
------------------------------------------
# devel, Groups, test.cat
dn: cn=devel,ou=Groups,dc=test,dc=cat
objectClass: posixGroup
description: Devel staff
gidNumber: 40003
cn: devel
memberUid: user1
memberUid: user2

authconfig line:
--------------------
authconfig --enablelocauthorize --enablecachecreds --enableldap --enableldapauth --ldapserver=ldap://head1 --ldapbasedn="dc=test,dc=cat" --enableldaptls --enableldapstarttls --updateall

getent group:
------------------
.....
usertest:*:40004:
devel:*:40003:
.....




Thank you very much.
Felip M

--
Felip Moll Marquès

Computer Science Engineer
E-Mail - lipixx@gmail.com
WebPage - http://lipix.ciutadella.es