Ubuntu 22.04 domain user has different user groups

Hello,

we joined a Kubuntu 22.04 Installation to Univention domain with this command:

DEBIAN_FRONTEND=noninteractive apt-get install univention-domain-join

After that we rebooted the system and checked the user memberships with the command id.

We noticed, that there were different results if we use the command id or id username-logged-in

`id:` uid=1001(user1) gid=215(it) Gruppen=215(it),4(adm),20(dialout),24(cdrom),25(floppy),29(audio),46(plugdev),5084(univentiongroup2)`

`id username-logged-in`: uid=1001(user1) gid=215(it) Gruppen=215(it),5084(univentiongroup2)

On Kubuntu 18.04 it works correctly.

nsswitch 22.04

# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.

passwd:         files systemd sss
group:          files systemd sss
shadow:         files sss
gshadow:        files

hosts:          files mdns4_minimal [NOTFOUND=return] dns
networks:       files

protocols:      db files
services:       db files sss
ethers:         db files
rpc:            db files

netgroup:       nis sss
sudoers:        files sss
automount:      sss

nsswitch 18.04

# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.

# pre_auth-client-config # passwd:         compat systemd sss
passwd:   compat sss
# pre_auth-client-config # group:          compat systemd sss
group:    compat sss
# pre_auth-client-config # shadow:         compat sss
shadow:   compat
gshadow:        files

hosts:          files mdns4_minimal [NOTFOUND=return] dns
networks:       files

protocols:      db files
services:       db files sss
ethers:         db files
rpc:            db files

# pre_auth-client-config # netgroup:       nis sss
netgroup: nis
sudoers:        files sss

Anyone know what could be the problem?

Best regards,
Markus

Ich habe herausgefunden, wie die lokalen Gruppen gesetzt werden.

In der Datei /etc/security/group.conf (wird von univention-join Script erstellt) sind die Gruppen definiert und werden anschließend per pam_group gesetzt.

Mastodon