Issue: User groups are not synced
Is there an existing issue for this?
- [X] I have searched the existing issues and found none that matched mine
Describe the issue
After a user has logged in using SSH, I have added him to a new group in Microsoft Entra. When the user logs out, and then log in again, the new group is not synced on the on-premise machine.
Steps to reproduce
- Login user via SSH.
- Add it to a new group.
- Login again, and run
groups.
System information and logs
No response
Double check your logs
- [X] I have redacted any sensitive information from the logs
Thanks for the report. We believe that this issue is already fixed in the authd-msentraid snap from the edge channel. Could you please try following these instructions to try out the snap from the edge channel? Don't forget to switch back to the stable channel afterwards.
This does not seem to be fixed in the edge channel. i'm still not seeing groups
Are you sure that you don't see groups which you add the user to in Microsoft Entra? That should have been solved by https://github.com/ubuntu/authd/issues/520. I can confirm in my tests that I see those groups.
What does currently not work is adding the user to groups locally - that's https://github.com/ubuntu/authd/issues/576 which we plan to fix with a release scheduled for next week.
Apologies, I thought i was on edge, but forgot I wiped and imaged the machine again. Switched to edge and it is syncing
It seems groups are now syncing but the groups/GID are not updating if a group has been modified(via Entra) which in turn prevents a user from logging in. Returns "No result matching 'XYZ' in GroupByID"