[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: user removed from ldap group but Linux groups command still shows user as member of the group

To: openldap-technical@openldap.org
Subject: Re: user removed from ldap group but Linux groups command still shows user as member of the group
From: Bernard Fay <bernard.fay@gmail.com>
Date: Fri, 24 Feb 2017 10:02:48 -0500
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=5uOuwdAUMp3FaC8ztgal/7QNjIhM1ohldNdmrjlQI5I=; b=iltr5o0kacjfcMPQ+jSyBPJ1FTcIamknGUP8iSlI3iyiqjbI3MDSJP86tmqquGAmpI 58y417WWTPra32NPIBuqiqoFUKnqiXmpCn8DEmAv/7OKkdNRKPXh/KrqIYIuCVFB1gtF dwI5kiQaowCPaQHX0ZlU43WOWoKLv3lFESkWbVWkIzm4JckSmuxdJUBu0kSVkZUm2IET TbqhVq4vGobMKJuimR6zZ0q8ZQ2NwXkuzrcTuyppZYzmuJw+RY096oWj6ey1EU6zMmoG kdVkJRGp0ecW7lglC1k9+ckdTTjZSdxg42TRyhlL09zzw7tiIGBQwJTGmvL8qf9djXR9 ue/g==
In-reply-to: <0e592568-858a-6b02-568e-9596e90a336e@stroeder.com>
References: <CAH3AE4b16BtcjR+G0Yk7s-AERFfVkCvgY4FCv77i+xEy5JQLow@mail.gmail.com> <aca87856-9608-91c3-f41c-141ae648529d@t-online.de> <CAH3AE4ZMdmbHyZms5tXAi029vthz3S1q0rozD3rCmVw1_dAhMQ@mail.gmail.com> <0e592568-858a-6b02-568e-9596e90a336e@stroeder.com>

sssd is not running and even removed. At beginning we thought of using it as it is the recommended way to go. But sssd requires the use of a secured LDAP which we do not use as this LDAP is confined in a lab. We use nscd.

On Fri, Feb 24, 2017 at 9:56 AM, Michael Ströder <michael@stroeder.com> wrote:

Bernard Fay wrote:
> passwd: files sss ldap
> shadow: files sss ldap
> group: files sss ldap

This mix makes no sense at all. Either you use nss_sss to query sssd (which has its own
cache in /var/lib/sss/db) or you use nss_ldap (direct or via nss-pam-ldapd).

Decide which components you really want to use and clean your config before going any
further.

Ciao, Michael.

Follow-Ups:
- Re: user removed from ldap group but Linux groups command still shows user as member of the group
  - From: Michael Wandel <m.wandel@t-online.de>

References:
- user removed from ldap group but Linux groups command still shows user as member of the group
  - From: Bernard Fay <bernard.fay@gmail.com>
- Re: user removed from ldap group but Linux groups command still shows user as member of the group
  - From: Michael Wandel <m.wandel@t-online.de>
- Re: user removed from ldap group but Linux groups command still shows user as member of the group
  - From: Bernard Fay <bernard.fay@gmail.com>
- Re: user removed from ldap group but Linux groups command still shows user as member of the group
  - From: Michael Ströder <michael@stroeder.com>

Prev by Date: Re: user removed from ldap group but Linux groups command still shows user as member of the group
Next by Date: Re: user removed from ldap group but Linux groups command still shows user as member of the group
Index(es):
- Chronological
- Thread