[SSSD] Kerberos login

Braden McDaniel braden at endoframe.com
Thu Apr 19 01:52:09 UTC 2012


On Tue, 2012-04-17 at 13:18 -0400, Dmitri Pal wrote: 
> On 04/17/2012 01:59 AM, Jakub Hrozek wrote:
> > On Mon, Apr 16, 2012 at 10:35:57PM -0400, Braden McDaniel wrote:
> >> Is it the case that local authentication, if available, is simply
> >> preferred to Kerberos?  There exists a local user account for "braden"
> >> on the Fedora 16 box, but not the Fedora 17 one. 
> > Yes, that's almost certainly the case. Can you try logging in as
> > "braden at default" ? That should reach the SSSD and you should get a
> > ticket.
> 
> If the files in the pam stack precede sss (which is the correct
> configuration BTW) and you have dup accounts the local account is used.

Mystery solved.  Thanks, guys.

(And, yes, logging in as "braden at default" did successfully force
Kerberos authentication.)

-- 
Braden McDaniel <braden at endoframe.com>




More information about the sssd-devel mailing list