Could you provide more information? Create users/groups how? Currently, we will never store users and groups in the sysdb unless someone has performed a lookup for them, so this happens AFTER a negative cache check.

I'm not sure what you're trying to accomplish here.

This is for user which are created during authentication with the help of data from a Windows PAC or other authentication tokens containing information about the user and his group memberships. A separate responder will receive and evaluated this data and created a user and, if needed, groups to track his memberships. The service which preforms the authentication, e.g. sshd, might expect that calls like getpwnam() will be successful immediately after authentication and here we need to make sure that there is no entry in the negative cache for the user.

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.7.0

AFAIU this is the dependency for the trust work.

priority: major => critical
rhbz: =>

Fields changed

blockedby: =>
blocking: =>
milestone: SSSD 1.8.0 => SSSD 1.8 AD Integration

Fields changed

rhbz: => 0

Fields changed

feature_milestone: =>
milestone: SSSD AD Trust Feature => SSSD AD Extensions Feature

Fields changed

milestone: SSSD AD Extensions Feature => SSSD AD Trust Feature
owner: somebody => jzeleny

A lot of modifications happened since the ticket was created. Right now we retrieve a user from IPA server through NSS responder before it is created via the PAC responder. Therefore no negative cache record will be created for the user. Similar scenario applies to group retrieval. Therefore this ticket can be considered as fixed.

resolution: => fixed
status: new => closed

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1916

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.