On 04/17/2012 01:59 AM, Jakub Hrozek wrote:
On Mon, Apr 16, 2012 at 10:35:57PM -0400, Braden McDaniel wrote:
> Is it the case that local authentication, if available, is simply
> preferred to Kerberos? There exists a local user account for "braden"
> on the Fedora 16 box, but not the Fedora 17 one.
Yes, that's almost certainly the case. Can you try logging in as
"braden@default" ? That should reach the SSSD and you should get a
ticket.
_______________________________________________
sssd-devel mailing list
sssd-devel(a)lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/sssd-devel
If the files in the pam stack precede sss (which is the correct
configuration BTW) and you have dup accounts the local account is used.
--
Thank you,
Dmitri Pal
Sr. Engineering Manager IPA project,
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/