[Giorgio Pioda] > 2) In Debian libpam-mklocaluser seems not creating /etc/group entries. > missing both in /etc/group itself and not detected with > getent.Strangely this doesn't affect roaming login (it works). I believe I dropped updating /etc/group, as there is no need for it to be modified, and sssd should take care of making all needed group info available. -- Happy hacking Petter Reinholdtsen