Thanks Michael; I thought I had read that somewhere (about SSSD not supporting hosts map), too...but, can't find the reference. The hosts entry on all our clients are essentially the same: Hosts dns files ldap sss The older CentOS 5 systems don't have "sss" obviously. JD -----Original Message----- From: Michael Ströder [mailto:michael@stroeder.com] Sent: Tuesday, November 03, 2015 11:09 AM To: Borresen, John - 0444 - MITLL; openldap-technical Subject: Re: OpenLDAP & SSSD Question Borresen, John - 0444 - MITLL wrote: > Running OpenLDAP 2.4.40 on our CentOS 5 servers, with an assortment of > CentOS 5, 6, 7; Fedora20+, Ubuntu 12.04 to 14.04. The CentOS 5's are > running as straight LDAP clients. The others are using SSSD / LDAP. > > On the CentOS 5, when running "getent hosts", it will return the entire LDAP > Hosts dbase; which is the behavior we want. > > On all the systems running SSSD, they only return the local hosts file. If > explicitly adding a host to the command "getent hosts some_host", it will > only return if the host is in the local hosts file or DNS; never searching > (watching the logs) either the LDAP or SSSD. Debug is at maximum. AFAIK sssd does not support hosts map. Therefore you have something different on your CentOS 5 servers. Consult the hosts line in /etc/nsswitch.conf. Ciao, Michael.
Attachment:
smime.p7s
Description: S/MIME cryptographic signature