Re: Red Hat Appears to Ignore Secondary Groups for LDAP Users

Tim P. Starrin wrote:
On Red Hat Enterprise Linux (RHEL) 4 Update 6 with the latest patches

Given the LDAP user "t-bone" with the following group set...

% id
uid=9066(t-bone) gid=121(a00121) groups=121(a00121),144(a00144) \
context=user_u:system_r:unconfined_t

% groups
a00121 a00144


The following operations that should work on a Linux ext3 file system,
fail...

% ls -la
drwxr-x--- 2 root a00144 4096 Mar 19 13:29 a00144
-r--r----- 1 root a00144 29 Feb 27 18:34 date

% ls a00144
ls: a00144: Permission denied

% cat date
cat: date: Permission denied


Note that file and directory access via the primary group, gid=121(a00121),
works fine.

Did I setup something wrong or is this a real bug?

Thanks.


That should work, it works here with groups supplied by LDAP.
What are the permissions on the entire path leading to the directory containing a00144 and date?

What do you get if you use getent to display the group a00144?

# getent group a00144


--
Nigel Wade, System Administrator, Space Plasma Physics Group,
University of Leicester, Leicester, LE1 7RH, UK
E-mail : nmw@xxxxxxxxxxxx
Phone : +44 (0)116 2523548, Fax : +44 (0)116 2523555

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

Relevant Pages

  • Re: Really really OT
    ... but I am looking to rehome my cat. ... We live in Leicester. ... I have already contacted the RSPCA and they have said that they cannot take her in until October. ... I do not want any money for her I feel that ensuring she gets a good home is far better than money. ...
    (rec.arts.tv.uk.eastenders)
  • Re: Bird Flu
    ... Peter Stockdale wrote: ... in the case of some of the swans met on the Leicester line, ... Still, they put the cat in his place, which was well overdue! ...
    (uk.rec.waterways)