[SSSD-users] Slow convergence between sssd and windows 2008 r2 ad server
Paul Liljenberg
liljenberg.paul at gmail.com
Fri May 2 14:54:16 UTC 2014
I have the time to build and yes current 1.9 builds fine on debian stable.
I could build a debian package with fpm but it would be nice to have it in
backports.
On Fri, May 2, 2014 at 2:52 PM, steve <steve at steve-ss.com> wrote:
> On Fri, 2014-05-02 at 13:21 +0200, Paul Liljenberg wrote:
> > I did try modifying the conf with your suggested settings, but it did
> > not work. Hm.. I wonder if theres an error with sasl.
> >
> >
> > /var/log/auth.log:
> > May 2 12:58:44 client sssd_be: canonuserfunc error -7
> > May 2 12:58:44 client sssd_be: _sasl_plugin_load failed on
> > sasl_canonuser_init for plugin: ldapdb
> >
> >
>
> > What do you think?
>
> Do you have the time or are allowed to build a later version? Guessing
> what the devs have posted, it looks as if debian is stuck with an old
> version. I know gssapi works with 1.9 and better with the link I posted.
> Oh, maybe check the key really is in the keytab?
>
> Cheers,
> Steve
>
>
>
>
> >
> >
> > On Fri, May 2, 2014 at 11:22 AM, steve <steve at steve-ss.com> wrote:
> > On Fri, 2014-05-02 at 11:03 +0200, Paul Liljenberg wrote:
> > > Unfortuneately im tied to current debian stable in this
> > setup and
> > > backporting sssd does not seem possible. Thanx Steve.
> > >
> >
> > OK. You'll have to do the AD attribute mapping manually then.
> > This worked for us with 1.9:
> >
> > ldap_user_object_class = user
> > ldap_user_name = samAccountName
> > ldap_user_uid_number = uidNumber
> > ldap_user_gid_number = gidNumber
> > ldap_user_home_directory = unixHomeDirectory
> > ldap_user_shell = loginShell
> > ldap_group_object_class = group
> > ldap_group_search_base = dc=your,dc=domain
> > ldap_group_name = cn
> > ldap_group_member = member
> > #ldap_user_search_filter
> > =(&(objectCategory=User)(uidNumber=*))
> >
> > I think the commented filter was for 1.8. This should get your
> > user
> > through the process.
> > HTH
> > Steve
> >
> >
> >
> > _______________________________________________
> > sssd-users mailing list
> > sssd-users at lists.fedorahosted.org
> > https://lists.fedorahosted.org/mailman/listinfo/sssd-users
> >
> >
> >
> >
> >
> > --
> > Vänliga Hälsningar / Best Regards
> > Paul Liljenberg
> > _______________________________________________
> > sssd-users mailing list
> > sssd-users at lists.fedorahosted.org
> > https://lists.fedorahosted.org/mailman/listinfo/sssd-users
>
>
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users
>
--
Vänliga Hälsningar / Best Regards
Paul Liljenberg
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20140502/7ad384dc/attachment.html>
More information about the sssd-users
mailing list