[SSSD] Kerberos login

Dmitri Pal dpal at redhat.com
Tue Apr 17 17:18:27 UTC 2012


On 04/17/2012 01:59 AM, Jakub Hrozek wrote:
> On Mon, Apr 16, 2012 at 10:35:57PM -0400, Braden McDaniel wrote:
>> Is it the case that local authentication, if available, is simply
>> preferred to Kerberos?  There exists a local user account for "braden"
>> on the Fedora 16 box, but not the Fedora 17 one. 
> Yes, that's almost certainly the case. Can you try logging in as
> "braden at default" ? That should reach the SSSD and you should get a
> ticket.
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel

If the files in the pam stack precede sss (which is the correct
configuration BTW) and you have dup accounts the local account is used.

-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/






More information about the sssd-devel mailing list