Unable to add user to a group due to sssd?












1















I'm working on Fedora 29 x86_64 fully patched. I'm trying to add my user to the dialout group so I can open the modem:



$ ls -Al /dev/ttyUSB0
crw-rw----. 1 root dialout 188, 0 Feb 22 19:27 /dev/ttyUSB0

$ sudo usermod -a -G dialout jwalton
(Fri Feb 22 19:32:11:373072 2019) [sss_cache] [confdb_get_domains] (0x0010): No
domains configured, fatal error!
Could not open available domains
usermod: sss_cache exited with status 2
usermod: Failed to flush the sssd cache.


According to the Fedora boards at Error when inserting user in a group, one can remove SSSD. This is where the confusion arises.



The Fedora message does not state why SSSD is installed or why it is not configured to allow one to modify groups. In addition removing SSSD looks heavy weight to me.



And according to the sssd(8) man page, "SSSD provides a set of daemons to manage access to remote directories and authentication mechanisms." The description makes SSSD's role even more confusing since sudo works and I'm not doing anything with remote directories.



I'd like to know if there is a way to modify a user's groups without uninstalling software or configuring software. I guess I'd like to know how to go back to the old days where things "just worked" as expected.





$ sudo yum remove sssd
Dependencies resolved.
================================================================================
Package Arch Version Repository Size
================================================================================
Removing:
sssd x86_64 2.0.0-5.fc29 @updates 34 k
Removing unused dependencies:
adcli x86_64 0.8.2-2.fc29 @fedora 265 k
c-ares x86_64 1.13.0-5.fc29 @fedora 221 k
cyrus-sasl-gssapi x86_64 2.1.27-0.3rc7.fc29 @fedora 41 k
libdhash x86_64 0.5.0-41.fc29 @fedora 60 k
libipa_hbac x86_64 2.0.0-5.fc29 @updates 61 k
libsss_autofs x86_64 2.0.0-5.fc29 @updates 65 k
libsss_certmap x86_64 2.0.0-5.fc29 @updates 119 k
libsss_idmap x86_64 2.0.0-5.fc29 @updates 77 k
libsss_nss_idmap x86_64 2.0.0-5.fc29 @updates 89 k
libsss_sudo x86_64 2.0.0-5.fc29 @updates 58 k
python3-sssdconfig noarch 2.0.0-5.fc29 @updates 185 k
sssd-ad x86_64 2.0.0-5.fc29 @updates 377 k
sssd-client x86_64 2.0.0-5.fc29 @updates 249 k
sssd-common x86_64 2.0.0-5.fc29 @updates 4.9 M
sssd-common-pac x86_64 2.0.0-5.fc29 @updates 247 k
sssd-ipa x86_64 2.0.0-5.fc29 @updates 708 k
sssd-krb5 x86_64 2.0.0-5.fc29 @updates 83 k
sssd-krb5-common x86_64 2.0.0-5.fc29 @updates 292 k
sssd-ldap x86_64 2.0.0-5.fc29 @updates 141 k
sssd-nfs-idmap x86_64 2.0.0-5.fc29 @updates 41 k
sssd-proxy x86_64 2.0.0-5.fc29 @updates 138 k

Transaction Summary
================================================================================
Remove 22 Packages

Freed space: 8.4 M
Is this ok [y/N]: N









share|improve this question























  • Including the contents of sssd.conf in your system might help reproduce this issue...

    – filbranden
    Feb 23 at 6:31











  • Thanks @filbranden. A sudo find /etc/ -name sssd.* returns 0 results.

    – jww
    Feb 23 at 6:35













  • I could not take it anymore... I had to remove SSSD. Now open in the Fedora bugzilla: Issue 1680446, SSSD does not allow usermod to add a user to a group.

    – jww
    Feb 25 at 3:40













  • Good call, hopefully you'll get a useful response there. If you're not using remote accounts (LDAP, AD, etc.) then sssd isn't really doing much important on your system... It still should work, but you won't miss it in that case. Good luck with the Bugzilla!

    – filbranden
    Feb 25 at 3:48
















1















I'm working on Fedora 29 x86_64 fully patched. I'm trying to add my user to the dialout group so I can open the modem:



$ ls -Al /dev/ttyUSB0
crw-rw----. 1 root dialout 188, 0 Feb 22 19:27 /dev/ttyUSB0

$ sudo usermod -a -G dialout jwalton
(Fri Feb 22 19:32:11:373072 2019) [sss_cache] [confdb_get_domains] (0x0010): No
domains configured, fatal error!
Could not open available domains
usermod: sss_cache exited with status 2
usermod: Failed to flush the sssd cache.


According to the Fedora boards at Error when inserting user in a group, one can remove SSSD. This is where the confusion arises.



The Fedora message does not state why SSSD is installed or why it is not configured to allow one to modify groups. In addition removing SSSD looks heavy weight to me.



And according to the sssd(8) man page, "SSSD provides a set of daemons to manage access to remote directories and authentication mechanisms." The description makes SSSD's role even more confusing since sudo works and I'm not doing anything with remote directories.



I'd like to know if there is a way to modify a user's groups without uninstalling software or configuring software. I guess I'd like to know how to go back to the old days where things "just worked" as expected.





$ sudo yum remove sssd
Dependencies resolved.
================================================================================
Package Arch Version Repository Size
================================================================================
Removing:
sssd x86_64 2.0.0-5.fc29 @updates 34 k
Removing unused dependencies:
adcli x86_64 0.8.2-2.fc29 @fedora 265 k
c-ares x86_64 1.13.0-5.fc29 @fedora 221 k
cyrus-sasl-gssapi x86_64 2.1.27-0.3rc7.fc29 @fedora 41 k
libdhash x86_64 0.5.0-41.fc29 @fedora 60 k
libipa_hbac x86_64 2.0.0-5.fc29 @updates 61 k
libsss_autofs x86_64 2.0.0-5.fc29 @updates 65 k
libsss_certmap x86_64 2.0.0-5.fc29 @updates 119 k
libsss_idmap x86_64 2.0.0-5.fc29 @updates 77 k
libsss_nss_idmap x86_64 2.0.0-5.fc29 @updates 89 k
libsss_sudo x86_64 2.0.0-5.fc29 @updates 58 k
python3-sssdconfig noarch 2.0.0-5.fc29 @updates 185 k
sssd-ad x86_64 2.0.0-5.fc29 @updates 377 k
sssd-client x86_64 2.0.0-5.fc29 @updates 249 k
sssd-common x86_64 2.0.0-5.fc29 @updates 4.9 M
sssd-common-pac x86_64 2.0.0-5.fc29 @updates 247 k
sssd-ipa x86_64 2.0.0-5.fc29 @updates 708 k
sssd-krb5 x86_64 2.0.0-5.fc29 @updates 83 k
sssd-krb5-common x86_64 2.0.0-5.fc29 @updates 292 k
sssd-ldap x86_64 2.0.0-5.fc29 @updates 141 k
sssd-nfs-idmap x86_64 2.0.0-5.fc29 @updates 41 k
sssd-proxy x86_64 2.0.0-5.fc29 @updates 138 k

Transaction Summary
================================================================================
Remove 22 Packages

Freed space: 8.4 M
Is this ok [y/N]: N









share|improve this question























  • Including the contents of sssd.conf in your system might help reproduce this issue...

    – filbranden
    Feb 23 at 6:31











  • Thanks @filbranden. A sudo find /etc/ -name sssd.* returns 0 results.

    – jww
    Feb 23 at 6:35













  • I could not take it anymore... I had to remove SSSD. Now open in the Fedora bugzilla: Issue 1680446, SSSD does not allow usermod to add a user to a group.

    – jww
    Feb 25 at 3:40













  • Good call, hopefully you'll get a useful response there. If you're not using remote accounts (LDAP, AD, etc.) then sssd isn't really doing much important on your system... It still should work, but you won't miss it in that case. Good luck with the Bugzilla!

    – filbranden
    Feb 25 at 3:48














1












1








1








I'm working on Fedora 29 x86_64 fully patched. I'm trying to add my user to the dialout group so I can open the modem:



$ ls -Al /dev/ttyUSB0
crw-rw----. 1 root dialout 188, 0 Feb 22 19:27 /dev/ttyUSB0

$ sudo usermod -a -G dialout jwalton
(Fri Feb 22 19:32:11:373072 2019) [sss_cache] [confdb_get_domains] (0x0010): No
domains configured, fatal error!
Could not open available domains
usermod: sss_cache exited with status 2
usermod: Failed to flush the sssd cache.


According to the Fedora boards at Error when inserting user in a group, one can remove SSSD. This is where the confusion arises.



The Fedora message does not state why SSSD is installed or why it is not configured to allow one to modify groups. In addition removing SSSD looks heavy weight to me.



And according to the sssd(8) man page, "SSSD provides a set of daemons to manage access to remote directories and authentication mechanisms." The description makes SSSD's role even more confusing since sudo works and I'm not doing anything with remote directories.



I'd like to know if there is a way to modify a user's groups without uninstalling software or configuring software. I guess I'd like to know how to go back to the old days where things "just worked" as expected.





$ sudo yum remove sssd
Dependencies resolved.
================================================================================
Package Arch Version Repository Size
================================================================================
Removing:
sssd x86_64 2.0.0-5.fc29 @updates 34 k
Removing unused dependencies:
adcli x86_64 0.8.2-2.fc29 @fedora 265 k
c-ares x86_64 1.13.0-5.fc29 @fedora 221 k
cyrus-sasl-gssapi x86_64 2.1.27-0.3rc7.fc29 @fedora 41 k
libdhash x86_64 0.5.0-41.fc29 @fedora 60 k
libipa_hbac x86_64 2.0.0-5.fc29 @updates 61 k
libsss_autofs x86_64 2.0.0-5.fc29 @updates 65 k
libsss_certmap x86_64 2.0.0-5.fc29 @updates 119 k
libsss_idmap x86_64 2.0.0-5.fc29 @updates 77 k
libsss_nss_idmap x86_64 2.0.0-5.fc29 @updates 89 k
libsss_sudo x86_64 2.0.0-5.fc29 @updates 58 k
python3-sssdconfig noarch 2.0.0-5.fc29 @updates 185 k
sssd-ad x86_64 2.0.0-5.fc29 @updates 377 k
sssd-client x86_64 2.0.0-5.fc29 @updates 249 k
sssd-common x86_64 2.0.0-5.fc29 @updates 4.9 M
sssd-common-pac x86_64 2.0.0-5.fc29 @updates 247 k
sssd-ipa x86_64 2.0.0-5.fc29 @updates 708 k
sssd-krb5 x86_64 2.0.0-5.fc29 @updates 83 k
sssd-krb5-common x86_64 2.0.0-5.fc29 @updates 292 k
sssd-ldap x86_64 2.0.0-5.fc29 @updates 141 k
sssd-nfs-idmap x86_64 2.0.0-5.fc29 @updates 41 k
sssd-proxy x86_64 2.0.0-5.fc29 @updates 138 k

Transaction Summary
================================================================================
Remove 22 Packages

Freed space: 8.4 M
Is this ok [y/N]: N









share|improve this question














I'm working on Fedora 29 x86_64 fully patched. I'm trying to add my user to the dialout group so I can open the modem:



$ ls -Al /dev/ttyUSB0
crw-rw----. 1 root dialout 188, 0 Feb 22 19:27 /dev/ttyUSB0

$ sudo usermod -a -G dialout jwalton
(Fri Feb 22 19:32:11:373072 2019) [sss_cache] [confdb_get_domains] (0x0010): No
domains configured, fatal error!
Could not open available domains
usermod: sss_cache exited with status 2
usermod: Failed to flush the sssd cache.


According to the Fedora boards at Error when inserting user in a group, one can remove SSSD. This is where the confusion arises.



The Fedora message does not state why SSSD is installed or why it is not configured to allow one to modify groups. In addition removing SSSD looks heavy weight to me.



And according to the sssd(8) man page, "SSSD provides a set of daemons to manage access to remote directories and authentication mechanisms." The description makes SSSD's role even more confusing since sudo works and I'm not doing anything with remote directories.



I'd like to know if there is a way to modify a user's groups without uninstalling software or configuring software. I guess I'd like to know how to go back to the old days where things "just worked" as expected.





$ sudo yum remove sssd
Dependencies resolved.
================================================================================
Package Arch Version Repository Size
================================================================================
Removing:
sssd x86_64 2.0.0-5.fc29 @updates 34 k
Removing unused dependencies:
adcli x86_64 0.8.2-2.fc29 @fedora 265 k
c-ares x86_64 1.13.0-5.fc29 @fedora 221 k
cyrus-sasl-gssapi x86_64 2.1.27-0.3rc7.fc29 @fedora 41 k
libdhash x86_64 0.5.0-41.fc29 @fedora 60 k
libipa_hbac x86_64 2.0.0-5.fc29 @updates 61 k
libsss_autofs x86_64 2.0.0-5.fc29 @updates 65 k
libsss_certmap x86_64 2.0.0-5.fc29 @updates 119 k
libsss_idmap x86_64 2.0.0-5.fc29 @updates 77 k
libsss_nss_idmap x86_64 2.0.0-5.fc29 @updates 89 k
libsss_sudo x86_64 2.0.0-5.fc29 @updates 58 k
python3-sssdconfig noarch 2.0.0-5.fc29 @updates 185 k
sssd-ad x86_64 2.0.0-5.fc29 @updates 377 k
sssd-client x86_64 2.0.0-5.fc29 @updates 249 k
sssd-common x86_64 2.0.0-5.fc29 @updates 4.9 M
sssd-common-pac x86_64 2.0.0-5.fc29 @updates 247 k
sssd-ipa x86_64 2.0.0-5.fc29 @updates 708 k
sssd-krb5 x86_64 2.0.0-5.fc29 @updates 83 k
sssd-krb5-common x86_64 2.0.0-5.fc29 @updates 292 k
sssd-ldap x86_64 2.0.0-5.fc29 @updates 141 k
sssd-nfs-idmap x86_64 2.0.0-5.fc29 @updates 41 k
sssd-proxy x86_64 2.0.0-5.fc29 @updates 138 k

Transaction Summary
================================================================================
Remove 22 Packages

Freed space: 8.4 M
Is this ok [y/N]: N






fedora group usermod






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Feb 23 at 0:42









jwwjww

1,59832568




1,59832568













  • Including the contents of sssd.conf in your system might help reproduce this issue...

    – filbranden
    Feb 23 at 6:31











  • Thanks @filbranden. A sudo find /etc/ -name sssd.* returns 0 results.

    – jww
    Feb 23 at 6:35













  • I could not take it anymore... I had to remove SSSD. Now open in the Fedora bugzilla: Issue 1680446, SSSD does not allow usermod to add a user to a group.

    – jww
    Feb 25 at 3:40













  • Good call, hopefully you'll get a useful response there. If you're not using remote accounts (LDAP, AD, etc.) then sssd isn't really doing much important on your system... It still should work, but you won't miss it in that case. Good luck with the Bugzilla!

    – filbranden
    Feb 25 at 3:48



















  • Including the contents of sssd.conf in your system might help reproduce this issue...

    – filbranden
    Feb 23 at 6:31











  • Thanks @filbranden. A sudo find /etc/ -name sssd.* returns 0 results.

    – jww
    Feb 23 at 6:35













  • I could not take it anymore... I had to remove SSSD. Now open in the Fedora bugzilla: Issue 1680446, SSSD does not allow usermod to add a user to a group.

    – jww
    Feb 25 at 3:40













  • Good call, hopefully you'll get a useful response there. If you're not using remote accounts (LDAP, AD, etc.) then sssd isn't really doing much important on your system... It still should work, but you won't miss it in that case. Good luck with the Bugzilla!

    – filbranden
    Feb 25 at 3:48

















Including the contents of sssd.conf in your system might help reproduce this issue...

– filbranden
Feb 23 at 6:31





Including the contents of sssd.conf in your system might help reproduce this issue...

– filbranden
Feb 23 at 6:31













Thanks @filbranden. A sudo find /etc/ -name sssd.* returns 0 results.

– jww
Feb 23 at 6:35







Thanks @filbranden. A sudo find /etc/ -name sssd.* returns 0 results.

– jww
Feb 23 at 6:35















I could not take it anymore... I had to remove SSSD. Now open in the Fedora bugzilla: Issue 1680446, SSSD does not allow usermod to add a user to a group.

– jww
Feb 25 at 3:40







I could not take it anymore... I had to remove SSSD. Now open in the Fedora bugzilla: Issue 1680446, SSSD does not allow usermod to add a user to a group.

– jww
Feb 25 at 3:40















Good call, hopefully you'll get a useful response there. If you're not using remote accounts (LDAP, AD, etc.) then sssd isn't really doing much important on your system... It still should work, but you won't miss it in that case. Good luck with the Bugzilla!

– filbranden
Feb 25 at 3:48





Good call, hopefully you'll get a useful response there. If you're not using remote accounts (LDAP, AD, etc.) then sssd isn't really doing much important on your system... It still should work, but you won't miss it in that case. Good luck with the Bugzilla!

– filbranden
Feb 25 at 3:48










0






active

oldest

votes











Your Answer








StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f502435%2funable-to-add-user-to-a-group-due-to-sssd%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























0






active

oldest

votes








0






active

oldest

votes









active

oldest

votes






active

oldest

votes
















draft saved

draft discarded




















































Thanks for contributing an answer to Unix & Linux Stack Exchange!


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f502435%2funable-to-add-user-to-a-group-due-to-sssd%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

How to reconfigure Docker Trusted Registry 2.x.x to use CEPH FS mount instead of NFS and other traditional...

is 'sed' thread safe

How to make a Squid Proxy server?