RHEL 7 getent passwd not working for LDAP

bluforce · 07-11-2017, 03:20 PM

Guys,
In RHEL 6 we used to be able to see if a user had a LDAP account by typing:

Code:

getent passwd | grep -i username

We could enter the last few letters of their last name to be able to tell. Now, I cannot get this command to work in RHEL 7. Are there any alternatives for RHEL 7?

Thanks

rtmistler · 07-12-2017, 07:54 AM

getent should be there in RHEL7 and I thought it was part of glibc-common or just part of glibc

Given that you're using RHEL, at the very least you could ask RedHat Support the details of this, but first I'd try to find and install getent. I even see some source of it where you can just download, make, and install it.

sgrlscz · 07-12-2017, 11:18 AM

I'm assuming you're using sssd for LDAP. If so, then try adding 'enumerate = True' to the LDAP section in the /etc/sssd/sssd.conf file and restart sssd.

By default, sss doesn't enumerate, so getent will only show local information. If you set enumerate to true, then getent should list the LDAP users.