[SSSD-users] sssd-ad GPO not working

Sumit Bose sbose at redhat.com
Mon Jan 26 10:25:55 UTC 2015


On Mon, Jan 26, 2015 at 10:54:19AM +0100, Koen de Boeve wrote:
> Hi Jacub,
> 
> I have a windows AD setup now (Windows 2012 R2). But it still isnt working(
> different error though).
> I Have setup another CentOS 7 box with sssd version 1.12.3 and bound it to
> this domain.
> 
> This is the sssd.conf:
> 
> [sssd]
> domains = GLXTMP.COM
> config_file_version = 2
> services = nss, pam
> 
> [domain/GLXTMP.COM]
> ad_domain = GLXTMP.COM
> krb5_realm = GLXTMP.COM
> realmd_tags = manages-system joined-with-samba
> cache_credentials = True
> id_provider = ad
> krb5_store_password_if_offline = True
> default_shell = /bin/bash
> ldap_id_mapping = False
> use_fully_qualified_names = False
> fallback_homedir = /home/%u
> 
> debug_level = 9
> 
> enumerate = True
> 
> access_provider = ad
> id_provider = ad
> auth_provider = ad
> chpass_provider = ad
> ad_gpo_access_control = permissive
> 
> 
> =========================
> 

"[child_sig_handler] (0x0020): child [18130] failed with status [1]."

Can you send the gpo child logs as well?

bye,
Sumit


More information about the sssd-users mailing list