Unable to read Unix Groups via SUGI

We recently upgraded our environment from 8.1.4 to 8.2.1 and overall the Unix components are working as expected with the exception of one system.  The system in question is running RHEL 8.6 and the others are running RHEL 8.7.  With the 8.6 system, I can import users without issue, but the groups are not being reported.  If I run a simulation, it reports 25 on the left and 0 on the right, and tries to mark all the groups already in OIM as outstanding.  There was no issue before the upgrade, but now, for whatever reason, the 8.2.1 environment cannot see the groups.  If I try to add a new user, the UNX_Account_Insert AdHocProjection fails stating it cannot find the GID of the default group even though it is there on each side.  If I simulate a projection, it wants to add all of the groups even though they are all there already and match 1:1 with the name and GID.

I've tried this both with OOTB 8.2.1 and with the hotfix from 02007875 and it fails either way.  Is there a way to see under the hood to know what SUGI is requesting the target system to do and/or what data is being returned?  Is there a location in the target system where SUGI would be directing error logs to?  It worked before the upgrade and works fine with RHEL 8.7 so I'm trying to figure out what isn't lining up between this specific system and OIM 8.2.1.  Any troubleshooting steps or tools would be greatly appreciated.

Parents Reply
  • It may be that your system is not able to access groups that users have created using the SUGI feature. If this occurs, it is helpful to contact the manufacturer of the product that is being used. This error indicates that SUGI is not working correctly and that the user or group in question does not have sufficient rights to read a given group. In some cases, the error may be caused by a system configuration issue, and a simple look through the system log files can help identify the problem. It can be useful to read the underlying system documentation or ask a qualified computer support expert for advice.

Children
No Data