Why is sssd->groupDN null?

danb35 · June 27, 2021, 11:50am

Working further on my LLNG module, and I’m making good progress getting it working with AD, but I’m running into an oddity. My test server is set up with local AD. On the Users & Groups page in Cockpit, it shows, inter alia, a Group DN:

So in my template, I try to extract that value like this:

if (${sssd}{Provider} eq "ad") {
	use NethServer::SSSD; 
	my $sssd = new NethServer::SSSD();
	my $baseDN = $sssd->baseDN();
	my $bindDN = $sssd->bindDN();
	my $bindPassword = $sssd->bindPassword();
	my $ldapURI = $sssd->ldapURI();
	my $groupDN = $sssd->groupDN();

But when I then try to use $groupDN in my template, it’s blank. A quick workaround is to use the Base DN, since at least in this context the values are the same–but this doesn’t seem like the expected behavior. Am I missing something here?

davidep · June 27, 2021, 5:23pm

The code implementation is straightforward

github.com

NethServer/nethserver-sssd/blob/640918c08c9292a7ef11a5702eefed4e25d28ba9/lib/perl/NethServer/SSSD.pm#L266


      
          =head2 groupDN
          
          Return LDAP GroupDN if set,
          otherwise a group DN calculated from the server domain.
          
          =cut
          
          sub groupDN {
              my $self = shift;
              my $suffix = '';
              return $self->{'GroupDN'} if ($self->{'GroupDN'});
          
              $suffix = $self->baseDN();
              
              if ($self->isLdap() && $self->isLocalProvider()) {
                  return "ou=Groups,$suffix";
              }
          
              return $suffix;
          }

I’m not a Perl programmer nowadays and I can’t remember the difference (if any exists) between new Something() and Something->new()…

danb35 · June 27, 2021, 8:36pm

Yesterday, it wasn’t working for me. Now, it is. Strange, but I’ll chalk it up to user error for now.