I said that "groups" and "getent" are consistent with each other but here is proof that that is not always the case.
After foo logs in and out, "groups foo" and "getent group domadmins" omit foo from domadmins whereas "getent group" still includes foo in domadmins. root@ellen:/# getent group |grep domadmins domadmins:*:512:bar,foo root@ellen:/# getent group domadmins domadmins:*:512:bar,foo root@ellen:/# groups foo foo : domusers devel publish domadmins root@ellen:/# su -c pwd foo / root@ellen:/# getent group |grep domadmins domadmins:*:512:bar,foo root@ellen:/# getent group domadmins domadmins:*:512:bar root@ellen:/# groups foo foo : domusers After restarting sssd, all methods initially agree (incorrectly) that foo is not a member of domadmins. root@ellen:/# restart sssd sssd start/running, process 6690 root@ellen:/# getent group | grep domadmins domadmins:*:512:bar root@ellen:/# getent group domadmins domadmins:*:512:bar root@ellen:/# groups foo foo : domusers But ten seconds later, "groups foo" and "getent group domadmins" include foo in domadmins whereas "getent group" still omits foo from domadmins. root@ellen:/# # Wait ten seconds root@ellen:/# getent group | grep domadmins domadmins:*:512:bar root@ellen:/# getent group domadmins domadmins:*:512:bar,foo root@ellen:/# groups foo foo : domusers devel publish domadmins This is, again, with enumerate = true in [domain/SAMBA]. Sometimes, though, nothing changes even after ten seconds. Sometimes restarting sssd causes "getent group" to include foo in domadmins again. The behavior varies. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1049186 Title: sssd forgets group memberships of foo when foo logs in; remembers them after ten seconds after restarting sssd To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1049186/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
