SSSD e autofs

Question

Estou tentando configurar o SSSD para obter mapas de automontagem do Active Directory.

Acho que minhas configurações estão corretas, mas ele usa o nome de usuário incorreto para consultar o AD. É necessário o que estiver definido como "mapname" (atrás do sinal + ) de /etc/auto.master , por exemplo, +auto.master resulta no seguinte log de depuração (sssd_autofs debug_level = 6):

[sssd[autofs]] [accept_fd_handler] (0x0400): Client connected!
[sssd[autofs]] [sss_cmd_get_version] (0x0200): Received client version [1].
[sssd[autofs]] [sss_cmd_get_version] (0x0200): Offered version [1].
[sssd[autofs]] [sss_autofs_cmd_setautomntent] (0x0400): Got request for automount map named [email protected]
[sssd[autofs]] [sss_parse_name_for_domains] (0x0200): name '[email protected]' matched expression for domain 'example.com', user is auto.master
[sssd[autofs]] [setautomntent_send] (0x0400): Requesting info for automount map [auto.master] from [example.com]
[sssd[autofs]] [lookup_automntmap_step] (0x0400): Requesting info for [[email protected]]
[sssd[autofs]] [sysdb_get_map_byname] (0x0400): No such map
[sssd[autofs]] [lookup_automntmap_step] (0x0080): No automount map [auto.master] in cache for domain [example.com]
[sssd[autofs]] [sss_dp_issue_request] (0x0400): Issuing request for [0x406840:0:[email protected]]
[sssd[autofs]] [sss_dp_get_autofs_msg] (0x0400): Creating autofs request for [example.com][4105][mapname=auto.master]
[sssd[autofs]] [sss_dp_internal_get_send] (0x0400): Entering request [0x406840:0:[email protected]]
[sssd[autofs]] [lookup_automntmap_step] (0x0400): Requesting info for [[email protected]]
[sssd[autofs]] [sysdb_autofs_entries_by_map] (0x0400): Getting entries for map auto.master
[sssd[autofs]] [sysdb_autofs_entries_by_map] (0x0400): No entries for the map
[sssd[autofs]] [lookup_automntmap_step] (0x0400): setautomntent done for map auto.master
[sssd[autofs]] [sss_autofs_cmd_setautomntent_done] (0x0400): setautomntent found data
[sssd[autofs]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x406840:0:[email protected]]
[sssd[autofs]] [sss_autofs_cmd_getautomntent] (0x0400): Requested data of map [email protected] cursor 0 max entries 512
[sssd[autofs]] [sss_autofs_cmd_getautomntent] (0x0400): Performing implicit setautomntent
[sssd[autofs]] [sss_parse_name_for_domains] (0x0200): name '[email protected]' matched expression for domain 'example.com', user is auto.master
[sssd[autofs]] [setautomntent_send] (0x0400): Requesting info for automount map [auto.master] from [example.com]
[sssd[autofs]] [lookup_automntmap_step] (0x0400): Requesting info for [[email protected]]
[sssd[autofs]] [sss_dp_issue_request] (0x0400): Issuing request for [0x406840:0:[email protected]]
[sssd[autofs]] [sss_dp_get_autofs_msg] (0x0400): Creating autofs request for [example.com][4105][mapname=auto.master]
[sssd[autofs]] [sss_dp_internal_get_send] (0x0400): Entering request [0x406840:0:[email protected]]
[sssd[autofs]] [lookup_automntmap_step] (0x0400): Requesting info for [[email protected]]
[sssd[autofs]] [sysdb_autofs_entries_by_map] (0x0400): Getting entries for map auto.master
[sssd[autofs]] [sysdb_autofs_entries_by_map] (0x0400): No entries for the map
[sssd[autofs]] [lookup_automntmap_step] (0x0400): setautomntent done for map auto.master
[sssd[autofs]] [getautomntent_implicit_done] (0x0020): Cannot get map after setautomntent succeeded?
[sssd[autofs]] [sss_dp_req_destructor] (0x0400): Deleting request: [0x406840:0:[email protected]]
[sssd[autofs]] [sss_autofs_cmd_endautomntent] (0x0400): endautomntent called
[sssd[autofs]] [client_recv] (0x0200): Client disconnected!

Alguém conseguiu isso funcionar?

    

Answer 1

Encontrei alguma ajuda no canal de IRC #sssd.

Aparentemente, a entrada user is log não significa que o usuário esteja se conectando, mas apenas o mapa do automount que está procurando.

Parecia que eu tinha um erro de configuração no AD. Ao elevar o domínio debug_level para 6 no meu sssd.conf da seguinte forma:

...
[domain/example.com]
debug_level = 6
...

Consegui visualizar a consulta LDAP feita no meu servidor do AD. Parece que eu tive que colocar meus nisObjects sob o meu nisMap, eu os coloquei na mesma UO = automount.

Então eu movi esses objetos e tudo está funcionando bem agora!