Does gssproxy have anything todo with sssd?
On Tue, Aug 1, 2017 at 4:46 PM, Louis Garcia <louisgtwo(a)gmail.com> wrote:
In fedora 26 where should sssd.conf live? /etc/sssd/ or
/etc/sssd/conf.d/ ??
I set debug_level = 5 and all I see is
[sssd[nss]] [sss_dp_get_reply] (0x0010): The Data Provider returned an
error [org.freedesktop.sssd.Error.DataProvider.Fatal]
On Tue, Aug 1, 2017 at 3:51 PM, Louis Garcia <louisgtwo(a)gmail.com> wrote:
> Yes I did mean files. I fix it, restarted sssd and logged back in with
> the same problem. My client still authenticates to pam not kerberos.
>
> Can it be something with authconfig?
>
> On Tue, Aug 1, 2017 at 3:32 PM, Jakub Hrozek <jhrozek(a)redhat.com> wrote:
>
>> On Tue, Aug 01, 2017 at 03:02:04PM -0400, Louis Garcia wrote:
>> > I've setup a kdc server and I'm able to kinit from my client and get
a
>> > ticket for ssh, nfs. I am having trouble setting up sssd so I can skip
>> > kinit. I only setup a kerberos server do I also need a ldap server?
>> >
>> > This is how I configured PAM: #authconfig --enablesssd
>> --enablesssdauth
>> > --enablekrb5 --update
>> >
>> > I'm sure not one line of my sssd.conf file is right.
>> >
>> > [sssd]
>> > services = nss, pam
>> > config_file_version = 2
>> > reconnection_retries = 3
>> > sbus_timeout = 30
>> >
>> > [nss]
>> > filter_groups = root
>> > filter_users = root
>> >
>> > [pam]
>> > reconnection_retries = 3
>> > offline_credentials_expiration = 2
>> > offline_failed_login_attempts = 3
>> > offline_failed_login_delay = 5
>> >
>> > [domain/kerberos]
>> > id_provider = proxy
>> > proxy_lib_name = false
>>
>> false is almost certainly true, did you mean files?
>>
>> >
>> > auth_provider = krb5
>> > chpass_provider = krb5
>> > krb5_realm = MONTCLAIRE.LOCAL
>> > krb5_server = panther.montclaire.local
>> >
>> > cache_credentials = True
>> > krb5_store_password_if_offline = True
>>
>> > _______________________________________________
>> > sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
>> > To unsubscribe send an email to sssd-users-leave(a)lists.fedorah
>>
osted.org
>> _______________________________________________
>> sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
>> To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
>>
>
>