This bug is created as a clone of upstream ticket:
I installed a rhel 6.2 system with the sshd Privilege-separated user account only in active directory and not in the system /etc/passwd file. Under these conditions sshd which is supposed to run directly after sssd will not start.
Instead the following error is returned:
[ OK ] sssd: [ OK ]
Starting sshd: Privilege separation user sshd does not exist
The system sssd version is sssd-1.5.1-66.el6_2.3.x86_64
This request was not resolved in time for the current release.
Red Hat invites you to ask your support representative to
propose this request, if still desired, for consideration in
the next release of Red Hat Enterprise Linux.
This request was erroneously removed from consideration in Red Hat Enterprise Linux 6.4, which is currently under development. This request will be evaluated for inclusion in Red Hat Enterprise Linux 6.4.
Tested with sssd-1.9.2-3.el6
Re-opening the bug:
# /etc/init.d/sssd stop && rm -f /var/lib/sss/db/*.ldb /var/lib/sss/mc/* /var/log/sssd/* && /etc/init.d/sssd start && date && id kau1; sleep 3 && date && id kau1
Stopping sssd: [ OK ]
Starting sssd: [ OK ]
Thu Oct 18 20:57:50 IST 2012
id: kau1: No such user
Thu Oct 18 20:57:53 IST 2012
uid=1111(kau1) gid=1111(kau1_grp1) groups=1111(kau1_grp1)
Verified in version 1.9.2-13.
There is no specific test for this, but half of the sudo suite would fail if this is broken.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.