[SSSD] Kerberos login
Dmitri Pal
dpal at redhat.com
Tue Apr 17 17:18:27 UTC 2012
On 04/17/2012 01:59 AM, Jakub Hrozek wrote:
> On Mon, Apr 16, 2012 at 10:35:57PM -0400, Braden McDaniel wrote:
>> Is it the case that local authentication, if available, is simply
>> preferred to Kerberos? There exists a local user account for "braden"
>> on the Fedora 16 box, but not the Fedora 17 one.
> Yes, that's almost certainly the case. Can you try logging in as
> "braden at default" ? That should reach the SSSD and you should get a
> ticket.
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel
If the files in the pam stack precede sss (which is the correct
configuration BTW) and you have dup accounts the local account is used.
--
Thank you,
Dmitri Pal
Sr. Engineering Manager IPA project,
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
More information about the sssd-devel
mailing list