[SSSD-users] Connection to ad via ldap failing

Nordgren, Bryce L -FS bnordgren at fs.fed.us
Wed Jan 29 17:28:10 UTC 2014



> -----Original Message-----
> On Tue, Jan 28, 2014 at 11:07:03PM +0000, Nordgren, Bryce L -FS wrote:

> I think the most important log would be the one from the back end,
> generated by including debug_level in the [domain] section.

Ok. Will try it.

> Any reason why you set the principal to cn and not userPrincipalName ?

My userPrincipalName is set to <lotsanumbers>@FEDIDCARD.GOV whereas my Kerberos principal is bnordgren at DS.FS.FED.US. I suspect this has something to do with two factor authentication.

Thanks,
Bryce




This electronic message contains information generated by the USDA solely for the intended recipients. Any unauthorized interception of this message or the use or disclosure of the information it contains may violate the law and subject the violator to civil or criminal penalties. If you believe you have received this message in error, please notify the sender and delete the email immediately.


More information about the sssd-users mailing list