[CentOS] selinux prohibiting sssd usage

[Michael Gliwinski]

On Wednesday 10 Aug 2011 18:59:14 Paul Heinlein wrote:
> Oddly, when using sssd+ldap, getent without a specific key won't 
> return ldap account information, but with a key it will. That is, 
> "getent passwd" will return only accounts in the local /etc/passwd 
> database, but "getent passwd bob" will return ldap-supplied 
> information about user bo

That is normal unless you have 'enumerate = true' for the LDAP domain in SSSD 
config file.  Note that SSSD manual warns that this may be slow for large 
installations (personally I haven't had a problem with it yet but only have < 
200 posix users).


-- 
Michael Gliwinski
Henderson Group Information Services
9-11 Hightown Avenue, Newtownabby, BT36 4RT
Phone: 028 9034 3319

**********************************************************************************************
The information in this email is confidential and may be legally privileged.  It is intended solely for the addressee and access to the email by anyone else is unauthorised.
If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful.
When addressed to our clients, any opinions or advice contained in this e-mail are subject to the terms and conditions expressed  in the governing client engagement leter or contract.
If you have received this email in error please notify support at henderson-group.com

John Henderson (Holdings) Ltd
Registered office: 9 Hightown Avenue, Mallusk, County Antrim, Northern Ireland, BT36 4RT.
Registered in Northern Ireland
Registration Number NI010588
Vat No.: 814 6399 12
*********************************************************************************