[SSSD] krb5 ticket renewal via gnome-screensaver not working

Brian J. Murrell brian at interlinx.bc.ca
Mon Nov 9 13:27:48 UTC 2009


On Mon, 2009-11-09 at 07:58 -0500, Stephen Gallagher wrote: 
> 
> If you create an account at https://admin.fedoraproject.org/accounts you
> will not be required to validate the captcha.

That's what site (including the https) I am at.  Anyway, I seem to have
found one I could actually read.

> Brian, can you also attach the [domain/KRB5] section so we can see what
> your configuration looks like? (feel free to sanitize passwords if you
> are using them)

Sure.

[domain/KRB]
auth_provider = krb5
cache_credentials = true
enumerate = true
id_provider = ldap
chpass_provider = krb5

ldap_uri = ldap://ldap
ldap_user_search_base = ou=People,dc=interlinx,dc=bc,dc=ca
ldap_group_search_base = ou=Group,dc=interlinx,dc=bc,dc=ca
tls_reqcert = demand
ldap_tls_cacert = /etc/pki/tls/certs/ca-bundle.crt

krb5_kdcip = 10.75.22.3
krb5_realm = ILINX
krb5_changepw_principle = kadmin/changepw
krb5_ccachedir = /tmp
krb5_ccname_template = FILE:%d/krb5cc_%U_XXXXXX
krb5_auth_timeout = 15

debug_timestamps = true
debug_to_files = true
debug_level = 6

b.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20091109/2cd9d902/attachment.sig>


More information about the sssd-devel mailing list