<div dir="ltr"><div><div><div>The last thought that occurred was to run authconfig --test.
Authconfig apparently is the command used by various frontends so I
thought output from it could point to the problem<br><br></div>I wish the output would have made more sense to me - it does not quite indicate which files the answers come from.<br><br>$ sudo authconfig --test<br>caching is enabled<br>
nss_files is always enabled<br>nss_compat is disabled<br>nss_db is disabled<br>nss_hesiod is disabled<br> hesiod LHS = ""<br> hesiod RHS = ""<br>nss_ldap is disabled<br> LDAP+TLS is disabled<br> LDAP server = "ldap://SRV1.people.local"<br>
LDAP base DN = "dc=people,dc=local"<br>nss_nis is disabled<br> NIS server = ""<br> NIS domain = ""<br>nss_nisplus is disabled<br>nss_winbind is disabled<br> SMB workgroup = "PEOPLE"<br>
SMB servers = "SRV1.PEOPLE.LOCAL"<br> SMB security = "ads"<br> SMB realm = "PEOPLE.LOCAL"<br> Winbind template shell = "/bin/false"<br> SMB idmap range = "16777216-33554431"<br>
nss_sss is enabled by default<br>nss_wins is disabled<br>nss_mdns4_minimal is disabled<br>DNS preference over NSS or WINS is disabled<br>pam_unix is always enabled<br> shadow passwords are enabled<br> password hashing algorithm is sha512<br>
pam_krb5 is disabled<br> krb5 realm = ""<br> krb5 realm via dns is disabled<br> krb5 kdc = ""<br> krb5 kdc via dns is disabled<br> krb5 admin server = ""<br>pam_ldap is disabled<br> LDAP+TLS is disabled<br>
LDAP server = "ldap://SRV1.people.local"<br> LDAP base DN = "dc=people,dc=local"<br> LDAP schema = "rfc2307"<br>pam_pkcs11 is disabled<br> use only smartcard for login is disabled<br> smartcard module = "coolkey"<br>
smartcard removal action = "Ignore"<br>pam_fprintd is disabled<br>pam_ecryptfs is disabled<br>pam_winbind is disabled<br> SMB workgroup = "PEOPLE"<br> SMB servers = "SRV1.PEOPLE.LOCAL"<br> SMB security = "ads"<br>
SMB realm = "PEOPLE.LOCAL"<br>pam_sss is enabled by default<br> credential caching in SSSD is enabled<br> SSSD use instead of legacy services if possible is enabled<br>IPAv2 is disabled<br>IPAv2 domain was not joined<br>
IPAv2 server = ""<br> IPAv2 realm = ""<br> IPAv2 domain = ""<br>pam_pwquality is enabled (try_first_pass retry=3 authtok_type=)<br>pam_passwdqc is disabled ()<br>pam_access is disabled ()<br>
pam_mkhomedir or pam_oddjob_mkhomedir is enabled ()<br>Always authorize local users is enabled ()<br>Authenticate system accounts against network services is disabled<br>$<br><br></div>Thanks for looking at this,<br><br>
</div>
Roberts<br><div><div><br clear="all"><div><div><br>-- <br>==<br>Roberts Klotins<br><br>
</div></div><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On 25 October 2013 13:00, <span dir="ltr"><<a href="mailto:sssd-users-request@lists.fedorahosted.org" target="_blank">sssd-users-request@lists.fedorahosted.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Send sssd-users mailing list submissions to<br>
<a href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:sssd-users-request@lists.fedorahosted.org">sssd-users-request@lists.fedorahosted.org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:sssd-users-owner@lists.fedorahosted.org">sssd-users-owner@lists.fedorahosted.org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of sssd-users digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: sssd-users Digest, Vol 18, Issue 25 (Jakub Hrozek)<br>
2. sssd - GDM login (Roberts Klotiņš)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Fri, 25 Oct 2013 10:02:15 +0200<br>
From: Jakub Hrozek <<a href="mailto:jhrozek@redhat.com">jhrozek@redhat.com</a>><br>
To: <a href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
Subject: Re: [SSSD-users] sssd-users Digest, Vol 18, Issue 25<br>
Message-ID: <<a href="mailto:20131025080215.GC7624@hendrix.brq.redhat.com">20131025080215.GC7624@hendrix.brq.redhat.com</a>><br>
Content-Type: text/plain; charset=utf-8<br>
<br>
On Fri, Oct 25, 2013 at 09:58:48AM +0200, Jakub Hrozek wrote:<br>
> On Fri, Oct 25, 2013 at 02:25:04AM +0100, Roberts Klotiņš wrote:<br>
> > Hi again, still trying to understand how to make the setup to work.<br>
> ><br>
> > As the very last thing I thought to check into /etc/sysconfig/authconfig.<br>
> > What I found was that usekerberos and useldap were set to no. Maybe they<br>
> > (or at least kerberos) need to be set to yes?<br>
> ><br>
><br>
> Did you have a chance to gather the debug logs I asked about earlier?<br>
<br>
Ah, sorry, it was stuck in moderation. I let that e-mail through.<br>
<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Fri, 25 Oct 2013 09:47:27 +0100<br>
From: Roberts Klotiņš <<a href="mailto:roberts.klotins@gmail.com">roberts.klotins@gmail.com</a>><br>
To: <a href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
Subject: [SSSD-users] sssd - GDM login<br>
Message-ID:<br>
<CALr2nHsBoDisjrDoTrMX7uNBJTwrBDvsUAeQQbR=<a href="mailto:8pFDHxRUrw@mail.gmail.com">8pFDHxRUrw@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Hi,<br>
<br>
I did send them to the list, but at debug level 7 sssd_PEOPLE.log file they<br>
were about 15s KB in total and I sent them as an attachment. I was told to<br>
await till the post is approved by moderator because size over 40KB.<br>
<br>
I now put this same file edited for usernames and more descriptive host<br>
names on<br>
<br>
<a href="http://pastebin.com/ZRkmMgi6" target="_blank">http://pastebin.com/ZRkmMgi6</a><br>
<br>
sssd_PEOPLE.log was 15 KB<br>
krb5_child.log was empty - 0 bytes.<br>
<br>
With thanks,<br>
<br>
Roberts<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20131025/793bc202/attachment-0001.html" target="_blank">https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20131025/793bc202/attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
_______________________________________________<br>
sssd-users mailing list<br>
<a href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
<br>
<br>
End of sssd-users Digest, Vol 18, Issue 29<br>
******************************************<br>
</blockquote></div><br><br clear="all"><br>-- <br>==<br>Roberts Klotins<br><br>
</div></div>