SSSD/AD on RHEL 6: Secondary groups not always returned with id command
Issue
We have integrated SSSD with Active Directory on RHEL6.6. We have observed that sometimes, secondary groups are returned by the id command, while other times only the primary group (domain users) is returned. This breaks the ad_access_filter and sudo rules that rely on those groups being present.
Environment
Red Hat Enterprise Linux 6.6
sssd-1.11.6-30.el6_6.4.x86_64
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Close
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.