Centrify

Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-0018: Error - id: cannot find name for group ID XX

Authentication Service ,  

12 April,16 at 11:25 AM

Problem:

When trying to telnet into a Unix machine with your Active Directory credentials, you see the error "id: cannot find name for group ID XX", where XX is a number less than 100.


Cause:

This can occur if you created a group in Active Directory and enabled it for a zone with the GID set to less than 100.
By default, DirectControl is configured to ignore all GIDs under 100 and not perform a lookup of the Unix name from Active Directory.
This reduces network traffic and the load placed on Active Directory.


Resolution:

You can do one of the following:
  • Change the GID for the group to a number higher than 100.
  • Change DirectControl's default setting for starting GIDs (instructions below).
To change DirectControl's default setting for starting GIDs:
(1) On the Unix machine, open the file /etc/centrifydc/centrifydc.conf.
(2) Search for "nss.mingid" and edit the following setting by changing "XX" to the minimum GID you want DirectControl to look up through Active Directory: nss.mingid XX-n
(3) Restart the DirectControl daemon (adclient) using this command: /etc/init.d/centrifydc restart

Related Articles

 articleKB-3925: How to add Centrify parameter to a group policy articleKB-6041: How to show current license type in use by adclient articleKB-6040: How to change the license type in use after adclient successful joined to the AD? articleKB-6056: How to report the group policy settings that are in effect for the local computer? articleKB-6073: How to join the Linux/Unix Centrify Server to Active Directory with specific Computer Role? articleCentrify 17.10 Release Notes articleKB-6038: How to specify the license type to use when joining the server to AD using adjoin? articleKB-20210: Common Questions Regarding Centrify DirectControl and CoreOS article[How To] Enable Symantec VIP MFA for Centrify Server Suite on Linux Part I