Thanks. I get it finally working!! : Ubuntu-Quantal sssd+ad_provider+NFSv4 - :-)) but
still have some issues:
1.
Ticket expires after 10 hours - I run msktutil (application for joining linux to AD and
adding principals to the account and some more)
daily in crontab to prevent ticket expiration - maybe this is not necessary?
Anyway, I ends having to manually reset machine's account and create a new keytab (
it is inefficient, but haven't figured out yet another way)
How does sssd renew tickets if machine was offline more then 10 hours?
2.
To get rid off listing of tens of group at login, I use the option:
ldap_group_member = uniqueMember
It works during login (no more long list, and login delay), but doesn't work when
changing personality with 'su -'
(again long list of numbers+ login delay)
Best regards
Longina
-----Original Message-----
From: sssd-users-bounces(a)lists.fedorahosted.org
[mailto:sssd-users-bounces@lists.fedorahosted.org] On Behalf Of Jakub Hrozek
Sent: 22. november 2012 17:55
To: sssd-users(a)lists.fedorahosted.org
Subject: Re: [SSSD-users] problems sssd-1.9.2
On Thu, Nov 15, 2012 at 09:43:39AM +0000, Longina Przybyszewska wrote:
-----Original Message-----
From: sssd-users-bounces(a)lists.fedorahosted.org
[mailto:sssd-users-bounces@lists.fedorahosted.org] On Behalf Of Jakub
Hrozek
Sent: 13. november 2012 17:38
To: sssd-users(a)lists.fedorahosted.org
Subject: Re: [SSSD-users] problems sssd-1.9.2
On Tue, Nov 13, 2012 at 03:40:14PM +0000, Longina Przybyszewska wrote:
>
>
> -----Original Message-----
> From: sssd-users-bounces(a)lists.fedorahosted.org
> [mailto:sssd-users-bounces@lists.fedorahosted.org] On Behalf Of
> Jakub Hrozek
> Sent: 13. november 2012 14:58
> To: sssd-users(a)lists.fedorahosted.org
> Subject: Re: [SSSD-users] problems sssd-1.9.2
>
> On Tue, Nov 13, 2012 at 12:44:45PM +0000, Longina Przybyszewska wrote:
> > Hi,
> > I try sssd-1.9.2 on Ubuntu-Quantal with ad-provider.
You might also be interested in the automounter integration, although I'm not sure
that piece of functionality had been backported to Ubuntu yet. The Ubuntu automounter
maintainer would know best.
Oh, yes - how stable is automounter integration in the latest stable SSSD?
Is I enough to use autofs-5 - or does it need more integration with some SSSD
moduls/libraries?
I think the sss support was introduced in autofs 5.0.6, at least in Fedora. I'm
actually not quite sure about autofs upstream. You need to look for the lookup_sss.so
module.
Until I am lucky to get new packages from Ubuntu maintainers - can I use nsswitch
pointing to auto.home maps - would it work with SSSD?
The SSSD integration is provided by the lookup_sss.so module, which is able to talk to the
autofs responder process of the SSSD. If your distribution doesn't provide that
module, you should still be able to fall back to the LDAP lookups. You just won't be
able to leverage the unified configuration in sssd.conf and caching of the maps.
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users