[Bug 1317268] Re: ldap_group_object_class = top fails to reutrn group information

2015-04-02 Thread Timo Aaltonen
right, closing the bug ** Changed in: sssd (Ubuntu) Status: New => Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1317268 Title: ldap_group_object_class = top fails to reutrn group

[Bug 1317268] Re: ldap_group_object_class = top fails to reutrn group information

2015-02-19 Thread Jason Sharp
It seems that user private groups have been excluded in newer versions of sssd. Meaning, if an AD object isn't considered a "security group" then it is excluded from being looked at for GID. Top was originally being used to include ALL AD objects (user and group) were inspected so user private g

[Bug 1317268] Re: ldap_group_object_class = top fails to reutrn group information

2014-05-27 Thread Jason Sharp
Normally, i would agree, but if I use 'group' then gid and groups have no name associated with them because regular users don't have the object class "group" -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bu

[Bug 1317268] Re: ldap_group_object_class = top fails to reutrn group information

2014-05-22 Thread Jakub Hrozek
ldap_group_object_class = top is not the right choice, it matches /all/ objects by default, why not use 'group' ? See https://fedorahosted.org/sssd/wiki/Configuring%20sssd%20to%20authenticate%20with%20a%20Windows%202008%20Domain%20Server Or the version for the AD provider: https://fedorahosted.or