Re: [389-users] getent group doesnt show any ldap groups

2010-05-10 Thread Prashanth Sundaram
Sorry for late response. Yes, it resolves the DN properly along with secondary groups. [psunda...@ldap02 ~]$ id psundaram uid=2100(psundaram) gid=1000(staff) groups=1050(people),2000(admins),1000(staff) I will test the mapping attribute in a week or so. -Prashanth On Thu, 2010-05-06 at 14:45 -

Re: [389-users] getent group doesnt show any ldap groups

2010-05-06 Thread John A. Sullivan III
On Thu, 2010-05-06 at 14:45 -0400, Prashanth Sundaram wrote: > I got around this by changing the ldap.conf. > > pam_filter objectclass=posixAccount > pam_member_attribute uniquemember > > I haven;t tested this but you can also map the memberuid and memberof > to Uniquememember. So the nss_ldap ch

[389-users] getent group doesnt show any ldap groups

2010-05-06 Thread Prashanth Sundaram
I got around this by changing the ldap.conf. pam_filter objectclass=posixAccount pam_member_attribute uniquemember I haven;t tested this but you can also map the memberuid and memberof to Uniquememember. So the nss_ldap checks the uniquemember value every time. nss_map_attribute memberuid unique

Re: [389-users] getent group doesnt show any ldap groups

2010-05-04 Thread Rick Dicaire
On Tue, May 4, 2010 at 7:31 PM, John A. Sullivan III wrote: > Sure - go to the advanced properties of the group.  Look at the > objectclass attribute.  If it does not contain posixgroup (I believe > that's the correct value - I'm not looking at my 389 right now), click > in the list of values and

Re: [389-users] getent group doesnt show any ldap groups

2010-05-04 Thread Rich Megginson
Rick Dicaire wrote: > On Tue, May 4, 2010 at 7:07 AM, John A. Sullivan III > wrote: > >>> Why doesn't the group I'd added the user to show? >>> >>> >> I do not know if it is the same issue but I found I had to add the >> posixgroup objectclass to the group; I had to add the memberuid >>

Re: [389-users] getent group doesnt show any ldap groups

2010-05-04 Thread Rick Dicaire
On Tue, May 4, 2010 at 7:07 AM, John A. Sullivan III wrote: >> Why doesn't the group I'd added the user to show? >> > I do not know if it is the same issue but I found I had to add the > posixgroup objectclass to the group; I had to add the memberuid As a followup, is this group issue something s