Oracle Linux: OL8 sssd(1) Still Retrieves Users and Groups From Local Files Despite /etc/nsswitch.conf Puts sss Before files (Doc ID 2952620.1)

Last updated on JUNE 01, 2023

Applies to:

Symptoms

When users and/or groups that coexist in both FILES (local files) and AD (Active Directory), sharing the same UIDs or GIDs, Oracle Linux 8 sssd(1) can still retrieve users and groups from FILES instead of AD despite /etc/nsswitch.conf already puts sss before files in the "passwd:" and "group:" directives.

Oracle Linux 7 sssd(1) does not exhibit this behavior and works fine.

Here is an example to illustrate this problem, using only example user and group names.

Changes

This problem is triggered when AD administrators create users and groups on the AD server with the same UIDs or GIDs as those in FILES on Oracle Linux clients.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.