Slave LDAP is configured locally and sssd is pointed to the local ldap. Most of the users get access to samba shares normally, whereas for very few users samba shares are not getting mapped. For example, "user1" does not get any of the shares mapped, when I type "id user1" in the server it says "no such user". In this situation I have to clear sssd database in "/var/lib/sssd/db/*", restart sssd service and issue "id user1" command again. If it gives the result for this command, the drives get mapped, else it doesn't get mapped. The servers are into production already.
Could you please try using SSSD 1.5.5? I suspect the issue you're facing is resolved in the current long-term-maintenance release (1.5.x series).
We had a problem a while ago where our cache cleanup was inadvertently removing users that were still active on the system.
Additionally, can you please include your (sanitized) sssd.conf to this ticket?
Debug logs would also be very helpful. Set 'debug_level = 9' in your [domain/] section and restart SSSD. This will create /var/log/sssd/sssd_.log. Run the 'id user1' (without removing the cache) and then attach the log to this ticket (sanitized as needed).
component: SSSD => LDAP Provider
Leaving in need triage for another week. Please provide additional information as requested otherwise we would have to close the issue as works for me.
Closing this bug due to lack of information. Please reopen it if you are able to provide the requested information.
resolution: => worksforme status: new => closed
Fields changed
rhbz: => 0
milestone: NEEDS_TRIAGE => void
Metadata Update from @charanfedorahosted: - Issue set to the milestone: void
SSSD is moving from Pagure to Github. This means that new issues and pull requests will be accepted only in SSSD's github repository.
This issue has been cloned to Github and is available here: - https://github.com/SSSD/sssd/issues/1893
If you want to receive further updates on the issue, please navigate to the github issue and click on subscribe button.
subscribe
Thank you for understanding. We apologize for all inconvenience.