On Thu, 2010-05-06 at 08:11 -0400, Stephen Gallagher wrote:
On 05/06/2010 05:29 AM, Stjepan Gros wrote:
> For the past two or so weeks I tried to configure SSSD on F-12 and RHEL6
> beta (and also on Ubuntu 9.10) using authconfig and editing
> configuration files without any success and it drives me crazy!
For best results on Fedora 12, you should install sssd 1.1.1-3.fc12 from
the updates repo, and authconfig 6.1.4-1.fc13 from here:
http://koji.fedoraproject.org/koji/buildinfo?buildID=165917
As Tomas mentioned, we're not bringing that version of authconfig back
into Fedora 12 so that we don't impose SSSD on Fedora 12 users.
I installed this version (and later I remembered that I tried F-13 also
because of the same error message). But when I try to use
authconfig-gtk, I'm constantly getting the following error message:
Traceback (most recent call last):
File "/usr/share/authconfig/authconfig-gtk.py", line 487, in
idcombochanged
self.currauth)
File "/usr/share/authconfig/authconfig-gtk.py", line 450, in set_combo
widget.append_text(textmap[entry][0])
KeyError: 'K'
And the 'Authentication Method:' list is grayed out.
> I used tcpdump to see if anything accesses the LDAP port on IPA
server
> and there is no single try to access LDAP!
>
The reason it's not accessing LDAP is that when using the IPA backend,
it's first trying to kinit as host/fedora.freeipa.local and failing
(because the keytab does not exist)
Well, that's very important piece of information that I was missing. :)
Ok, we really need to document how to set up an IPA client better.
The
IPA backend was really designed to be used when talking to FreeIPA v2.
It makes certain assumptions that are available but not default in
FreeIPA v1.
<snip>
I'll try tomorrow the second version, SSSD is interesting to me because
of it's caching capabilities, and I'll give some feedback.
I hope this information helps you get up and running. If you have
other
problems, don't hesitate to ask here on the list, or you can talk to us
directly in the #freeipa channel on
irc.freenode.net
Ok, and thank you for your really quick response.
Stjepan