I thought I had read that somewhere (about SSSD not supporting hosts map),
too...but, can't find the reference. The hosts entry on all our clients are
essentially the same:
Hosts dns files ldap sss
The older CentOS 5 systems don't have "sss" obviously.
From: Michael Ströder [mailto:email@example.com]
Sent: Tuesday, November 03, 2015 11:09 AM
To: Borresen, John - 0444 - MITLL; openldap-technical
Subject: Re: OpenLDAP & SSSD Question
Borresen, John - 0444 - MITLL wrote:
Running OpenLDAP 2.4.40 on our CentOS 5 servers, with an assortment
CentOS 5, 6, 7; Fedora20+, Ubuntu 12.04 to 14.04. The CentOS 5's are
running as straight LDAP clients. The others are using SSSD / LDAP.
On the CentOS 5, when running "getent hosts", it will return the entire
Hosts dbase; which is the behavior we want.
On all the systems running SSSD, they only return the local hosts file.
explicitly adding a host to the command "getent hosts
some_host", it will
only return if the host is in the local hosts file or DNS; never searching
(watching the logs) either the LDAP or SSSD. Debug is at maximum.
AFAIK sssd does not support hosts map.
Therefore you have something different on your CentOS 5 servers.
Consult the hosts line in /etc/nsswitch.conf.