[Date Prev][Date Next] [Chronological] [Thread] [Top]

RE: OpenLDAP & SSSD Question



Thanks Michael;

I thought I had read that somewhere (about SSSD not supporting hosts map),
too...but, can't find the reference.  The hosts entry on all our clients are
essentially the same:

Hosts 	dns files ldap sss

The older CentOS 5 systems don't have "sss" obviously.

JD

-----Original Message-----
From: Michael Ströder [mailto:michael@stroeder.com] 
Sent: Tuesday, November 03, 2015 11:09 AM
To: Borresen, John - 0444 - MITLL; openldap-technical
Subject: Re: OpenLDAP & SSSD Question

Borresen, John - 0444 - MITLL wrote:
> Running OpenLDAP 2.4.40 on our CentOS 5 servers, with an assortment of
> CentOS 5, 6, 7; Fedora20+, Ubuntu 12.04 to 14.04.  The CentOS 5's are
> running as straight LDAP clients.  The others are using SSSD / LDAP.  
> 
> On the CentOS 5, when running "getent hosts", it will return the entire
LDAP
> Hosts dbase; which is the behavior we want.
> 
> On all the systems running SSSD, they only return the local hosts file.
If
> explicitly adding a host to the command "getent hosts some_host", it will
> only return if the host is in the local hosts file or DNS; never searching
> (watching the logs) either the LDAP or SSSD.  Debug is at maximum.

AFAIK sssd does not support hosts map.
Therefore you have something different on your CentOS 5 servers.
Consult the hosts line in /etc/nsswitch.conf.

Ciao, Michael.


Attachment: smime.p7s
Description: S/MIME cryptographic signature