On Fri, May 24, 2019 at 11:09 AM Sumit Bose <sbose(a)redhat.com> wrote:
[snip]
This means that the GPO based access control is used, is this what you
expected, please see ad_gpo_access_control in man sssd-ad for details.
Can you check if using 'access_provider = permit' helps to make login
work?
access_providere = permit makes it work again!
I asked our sysadmin and he told me he played with those settings a
few days ago. That could explain why my setup wasn't working because
he didn't do anything for the Linux boxes.
I'm thinking setting back the access_provider to 'ad' and changing
ad_gpo_access_control to 'permissive' would also work, I'll reply back
once I test it!
Thanks a lot!
>
> >
> > I've tried making the debug_level higher. I got this in sssd.log after
> > restarting the service
> >
> >
https://gist.github.com/jpleau/fc23629c95894143a05426dc1fc54b6e
>
> The relevant log file here is sssd_YOUR.DOMAIN.NAME.log.
>
> >
> > Also if I check journalctl -u sssd, I can see this:
> >
> >
https://gist.github.com/jpleau/286c65306ebbf750d02b72b225140af6
>
> There are hints that the connection to one of the AD DCs might have
> failed. But details should be available in sssd_YOUR.DOMAIN.NAME.log.
>
> bye,
> Sumit
>
> >
> >
> > > >
> > > > Thanks.
> > _______________________________________________
> > sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
> > To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
> > Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
> > List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahoste...
> _______________________________________________
> sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahoste...