[SSSD-users] Not getting any ticket in ccache in CentOS 6.6

Ola Nystrom olanys at gmail.com
Tue Apr 14 17:53:26 UTC 2015


I login via ssh to the server with SecureCRT and openssh from another
server. No difference in the result.

On Tue, Apr 14, 2015 at 7:50 PM, Jakub Hrozek <jhrozek at redhat.com> wrote:

> On Tue, Apr 14, 2015 at 07:14:11PM +0200, Ola Nystrom wrote:
> > I have a problem with getting a krb-ticket when logging in to my CentOS
> 6.6
> > server.
> > Any idea on how to troubleshoot?
> >
> > after login with AD-credentionals
> >
> > > [ola at galaxy ~]$ klist
> > > klist: No credentials cache found while retrieving principal name
> >
> >
> >
> > > [ola at galaxy ~]$ sssd --version
> >
> > 1.11.6
> >
> >
> > kerberos looks like it works, and the same config works on CentOS7.1
> >
> > sssd -i -d9 log filtered with krb
> > http://pastebin.com/XywvGEmR
> >
> > [ola at galaxy ~]$ kinit
> > Password for ola at ENSKEDE.LOCAL:
> > [ola at galaxy ~]$ klist
> > Ticket cache: KEYRING:persistent:11103
> > Default principal: ola at ENSKEDE.LOCAL
> >
> >
> > Valid starting     Expires            Service principal
> > 04/14/15 19:11:12  04/15/15 05:11:15  krbtgt/ENSKEDE.LOCAL at ENSKEDE.LOCAL
> >         renew until 04/21/15 19:11:12
> >
> >
> >
> > my sssd.conf
> > [ola at galaxy ~]$ sudo cat /etc/sssd/sssd.conf
> > [sudo] password for ola:
> > [sssd]
> > domains = ENSKEDE.LOCAL
> > services = nss, pam, pac
> > config_file_version = 2
> >
> > [domain/ENSKEDE.LOCAL]
> > id_provider = ad
> > auth_provider = ad
> > access_provider = ad
> > chpass_provider = ad
> > cache_credentials = true
> > ldap_id_mapping = False
> > ldap_referrals = false
> > krb5_use_kdcinfo = false
> > krb5_store_password_if_offline = true
> >
> > [ola at galaxy ~]$ cat /etc/krb5.conf
> > [logging]
> >  default = FILE:/var/log/krb5libs.log
> >  kdc = FILE:/var/log/krb5kdc.log
> >  admin_server = FILE:/var/log/kadmind.log
> >
> > [libdefaults]
> >  default_realm = ENSKEDE.LOCAL
> >  dns_lookup_realm = true
> >  dns_lookup_kdc = true
> >  ticket_lifetime = 24h
> >  renew_lifetime = 7d
> >  forwardable = true
> >  rdns = false
> >  default_ccache_name = KEYRING:persistent:%{uid}
> >
> >
> > Any idea on how to troubleshoot?
>
> This document might be a good start:
>     https://fedorahosted.org/sssd/wiki/Troubleshooting
> along with describing how exactly you logged in (su from root would be
> expected to not yield any ccache)
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users
>



-- 
Ola Nyström

“OSI model jokes work on so many levels”
— jorge_rbs
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20150414/4d5f1ef5/attachment.html>


More information about the sssd-users mailing list