override_gid in sssd with local users and two Active Directory Domains












0















My sssd.conf includes two domains. The first one "BOB" authenticates and uses the override_gid. The second one "RAY" authenticates but doesn't use the override_gid.



Anyone know how to get the override_gid working for both?



[domain/BOB]
ad_domain = BOB
krb5_realm = BOB
realmd_tags = manages-system joined-with-samba
cache_credentials = True
id_provider = ad
krb5_store_password_if_offline = True
default_shell = /bin/bash
ldap_id_mapping = True
use_fully_qualified_names = True
fallback_homedir = /home/%u@%d
access_provider = ad
override_gid = 1001

[domain/RAY]
ad_domain = RAY
krb5_realm = RAY
id_provider = ad
override_gid = 1001









share|improve this question



























    0















    My sssd.conf includes two domains. The first one "BOB" authenticates and uses the override_gid. The second one "RAY" authenticates but doesn't use the override_gid.



    Anyone know how to get the override_gid working for both?



    [domain/BOB]
    ad_domain = BOB
    krb5_realm = BOB
    realmd_tags = manages-system joined-with-samba
    cache_credentials = True
    id_provider = ad
    krb5_store_password_if_offline = True
    default_shell = /bin/bash
    ldap_id_mapping = True
    use_fully_qualified_names = True
    fallback_homedir = /home/%u@%d
    access_provider = ad
    override_gid = 1001

    [domain/RAY]
    ad_domain = RAY
    krb5_realm = RAY
    id_provider = ad
    override_gid = 1001









    share|improve this question

























      0












      0








      0








      My sssd.conf includes two domains. The first one "BOB" authenticates and uses the override_gid. The second one "RAY" authenticates but doesn't use the override_gid.



      Anyone know how to get the override_gid working for both?



      [domain/BOB]
      ad_domain = BOB
      krb5_realm = BOB
      realmd_tags = manages-system joined-with-samba
      cache_credentials = True
      id_provider = ad
      krb5_store_password_if_offline = True
      default_shell = /bin/bash
      ldap_id_mapping = True
      use_fully_qualified_names = True
      fallback_homedir = /home/%u@%d
      access_provider = ad
      override_gid = 1001

      [domain/RAY]
      ad_domain = RAY
      krb5_realm = RAY
      id_provider = ad
      override_gid = 1001









      share|improve this question














      My sssd.conf includes two domains. The first one "BOB" authenticates and uses the override_gid. The second one "RAY" authenticates but doesn't use the override_gid.



      Anyone know how to get the override_gid working for both?



      [domain/BOB]
      ad_domain = BOB
      krb5_realm = BOB
      realmd_tags = manages-system joined-with-samba
      cache_credentials = True
      id_provider = ad
      krb5_store_password_if_offline = True
      default_shell = /bin/bash
      ldap_id_mapping = True
      use_fully_qualified_names = True
      fallback_homedir = /home/%u@%d
      access_provider = ad
      override_gid = 1001

      [domain/RAY]
      ad_domain = RAY
      krb5_realm = RAY
      id_provider = ad
      override_gid = 1001






      active-directory centos-7 domain-security






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Jan 3 at 13:15









      C BarC Bar

      12




      12






















          0






          active

          oldest

          votes











          Your Answer








          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "3"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1390167%2foverride-gid-in-sssd-with-local-users-and-two-active-directory-domains%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes
















          draft saved

          draft discarded




















































          Thanks for contributing an answer to Super User!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1390167%2foverride-gid-in-sssd-with-local-users-and-two-active-directory-domains%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          Plaza Victoria

          Brian Clough

          Cáceres