After playing around with my krb5.conf file i figured out that when adding the following
line:
[appdefaults]
do i get to join the realm. If not I get this error:
! Couldn't authenticate to active directory: SASL(-1): generic failure: GSSAPI Error:
Unspecified GSS failure. Minor code may provide more information (Server not found in
Kerberos database)
adcli: couldn't connect to concordia.ca domain: Couldn't authenticate to active
directory: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code
may provide more information (Server not found in Kerberos database)
! Insufficient permissions to join the domain
realm: Couldn't join realm: Insufficient permissions to join the domain
Maybe this is a bug? Anyways, how would this affect sssd letting me authenticate.
Thanks,
Thomas
________________________________________
From: thomas.beaudry(a)concordia.ca <thomas.beaudry(a)concordia.ca>
Sent: Wednesday, August 10, 2016 12:53 PM
To: sssd-users(a)lists.fedorahosted.org
Subject: [SSSD-users] Re: SSSD-PAM failure
oh I don't know if this makes a difference but i could only join the realm after
adding the following to the sssd.conf file
[appdefaults]
validate=false
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahosted.org