On Thu, 2014-06-19 at 16:08 +0200, Longina Przybyszewska wrote:
Log file d7 as attachment.
root@skywalker:/tmp# cat /etc/sssd/sssd.conf
[nss]
debug_level = 9
filter_groups = root
filter_users =
root,lightdm,ldap,named,avahi,haldaemon,dbus,radvd,tomcat,radiusd,news,mailman,nscd
[sssd]
debug_level = 6
domains =nat.c.sdu.dk
config_file_version = 2
services = nss, pam
[domain/nat.c.sdu.dk]
debug_level = 7
ad_domain = nat.c.sdu.dk
krb5_realm = NAT.C.SDU.DK
realmd_tags = manages-system joined-with-samba
cache_credentials = True
id_provider = ad
auth_provider = ad
access_provider = ad
krb5_store_password_if_offline = True
default_shell = /bin/bash
ldap_id_mapping = False
use_fully_qualified_names = True
fallback_homedir = /home/%d/%u
#
dyndns_update = true
Your keytab has
DOMAIN.ORG as the realm.
Your log has
NAT.DOMAIN.ORG
And your sssd.conf has:
NAT.C.SDU.DK
What is the realtionship between the realms?