<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 10/26/2013 06:36 AM, Roberts Klotiņš wrote:
<blockquote
cite="mid:CALr2nHt-86LB22FwQFyjdV_6-1_G6boivdJi0OOCiJ7Y-FO_XA@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>
<div>The last thought that occurred was to run authconfig
--test. Authconfig apparently is the command used by
various frontends so I thought output from it could point
to the problem<br>
<br>
</div>
I wish the output would have made more sense to me - it
does not quite indicate which files the answers come from.<br>
<br>
$ sudo authconfig --test<br>
caching is enabled<br>
nss_files is always enabled<br>
nss_compat is disabled<br>
nss_db is disabled<br>
nss_hesiod is disabled<br>
hesiod LHS = ""<br>
hesiod RHS = ""<br>
nss_ldap is disabled<br>
LDAP+TLS is disabled<br>
LDAP server = <a class="moz-txt-link-rfc2396E" href="ldap://SRV1.people.local">"ldap://SRV1.people.local"</a><br>
LDAP base DN = "dc=people,dc=local"<br>
nss_nis is disabled<br>
NIS server = ""<br>
NIS domain = ""<br>
nss_nisplus is disabled<br>
nss_winbind is disabled<br>
SMB workgroup = "PEOPLE"<br>
SMB servers = "SRV1.PEOPLE.LOCAL"<br>
SMB security = "ads"<br>
SMB realm = "PEOPLE.LOCAL"<br>
Winbind template shell = "/bin/false"<br>
SMB idmap range = "16777216-33554431"<br>
nss_sss is enabled by default<br>
nss_wins is disabled<br>
nss_mdns4_minimal is disabled<br>
DNS preference over NSS or WINS is disabled<br>
pam_unix is always enabled<br>
shadow passwords are enabled<br>
password hashing algorithm is sha512<br>
pam_krb5 is disabled<br>
krb5 realm = ""<br>
krb5 realm via dns is disabled<br>
krb5 kdc = ""<br>
krb5 kdc via dns is disabled<br>
krb5 admin server = ""<br>
pam_ldap is disabled<br>
LDAP+TLS is disabled<br>
LDAP server = <a class="moz-txt-link-rfc2396E" href="ldap://SRV1.people.local">"ldap://SRV1.people.local"</a><br>
LDAP base DN = "dc=people,dc=local"<br>
LDAP schema = "rfc2307"<br>
pam_pkcs11 is disabled<br>
use only smartcard for login is disabled<br>
smartcard module = "coolkey"<br>
smartcard removal action = "Ignore"<br>
pam_fprintd is disabled<br>
pam_ecryptfs is disabled<br>
pam_winbind is disabled<br>
SMB workgroup = "PEOPLE"<br>
SMB servers = "SRV1.PEOPLE.LOCAL"<br>
SMB security = "ads"<br>
SMB realm = "PEOPLE.LOCAL"<br>
pam_sss is enabled by default<br>
credential caching in SSSD is enabled<br>
SSSD use instead of legacy services if possible is enabled<br>
IPAv2 is disabled<br>
IPAv2 domain was not joined<br>
IPAv2 server = ""<br>
IPAv2 realm = ""<br>
IPAv2 domain = ""<br>
pam_pwquality is enabled (try_first_pass retry=3
authtok_type=)<br>
pam_passwdqc is disabled ()<br>
pam_access is disabled ()<br>
pam_mkhomedir or pam_oddjob_mkhomedir is enabled ()<br>
Always authorize local users is enabled ()<br>
Authenticate system accounts against network services is
disabled<br>
$<br>
<br>
</div>
Thanks for looking at this,<br>
<br>
</div>
Roberts<br>
<div>
<div><br clear="all">
<div>
<div><br>
-- <br>
==<br>
Roberts Klotins<br>
<br>
</div>
</div>
<br>
</div>
</div>
<div class="gmail_extra"><br>
<br>
<div class="gmail_quote">On 25 October 2013 13:00, <span
dir="ltr"><<a moz-do-not-send="true"
href="mailto:sssd-users-request@lists.fedorahosted.org"
target="_blank">sssd-users-request@lists.fedorahosted.org</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">Send
sssd-users mailing list submissions to<br>
<a moz-do-not-send="true"
href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a moz-do-not-send="true"
href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users"
target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
or, via email, send a message with subject or body 'help'
to<br>
<a moz-do-not-send="true"
href="mailto:sssd-users-request@lists.fedorahosted.org">sssd-users-request@lists.fedorahosted.org</a><br>
<br>
You can reach the person managing the list at<br>
<a moz-do-not-send="true"
href="mailto:sssd-users-owner@lists.fedorahosted.org">sssd-users-owner@lists.fedorahosted.org</a><br>
<br>
When replying, please edit your Subject line so it is more
specific<br>
than "Re: Contents of sssd-users digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: sssd-users Digest, Vol 18, Issue 25 (Jakub
Hrozek)<br>
2. sssd - GDM login (Roberts Klotiņš)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Fri, 25 Oct 2013 10:02:15 +0200<br>
From: Jakub Hrozek <<a moz-do-not-send="true"
href="mailto:jhrozek@redhat.com">jhrozek@redhat.com</a>><br>
To: <a moz-do-not-send="true"
href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
Subject: Re: [SSSD-users] sssd-users Digest, Vol 18, Issue
25<br>
Message-ID: <<a moz-do-not-send="true"
href="mailto:20131025080215.GC7624@hendrix.brq.redhat.com">20131025080215.GC7624@hendrix.brq.redhat.com</a>><br>
Content-Type: text/plain; charset=utf-8<br>
<br>
On Fri, Oct 25, 2013 at 09:58:48AM +0200, Jakub Hrozek
wrote:<br>
> On Fri, Oct 25, 2013 at 02:25:04AM +0100, Roberts
Klotiņš wrote:<br>
> > Hi again, still trying to understand how to make
the setup to work.<br>
> ><br>
> > As the very last thing I thought to check into
/etc/sysconfig/authconfig.<br>
> > What I found was that usekerberos and useldap
were set to no. Maybe they<br>
> > (or at least kerberos) need to be set to yes?<br>
> ><br>
><br>
> Did you have a chance to gather the debug logs I
asked about earlier?<br>
<br>
Ah, sorry, it was stuck in moderation. I let that e-mail
through.<br>
<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Fri, 25 Oct 2013 09:47:27 +0100<br>
From: Roberts Klotiņš <<a moz-do-not-send="true"
href="mailto:roberts.klotins@gmail.com">roberts.klotins@gmail.com</a>><br>
To: <a moz-do-not-send="true"
href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
Subject: [SSSD-users] sssd - GDM login<br>
Message-ID:<br>
<CALr2nHsBoDisjrDoTrMX7uNBJTwrBDvsUAeQQbR=<a
moz-do-not-send="true"
href="mailto:8pFDHxRUrw@mail.gmail.com">8pFDHxRUrw@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Hi,<br>
<br>
I did send them to the list, but at debug level 7
sssd_PEOPLE.log file they<br>
were about 15s KB in total and I sent them as an
attachment. I was told to<br>
await till the post is approved by moderator because size
over 40KB.<br>
<br>
I now put this same file edited for usernames and more
descriptive host<br>
names on<br>
<br>
<a moz-do-not-send="true"
href="http://pastebin.com/ZRkmMgi6" target="_blank">http://pastebin.com/ZRkmMgi6</a><br>
<br>
sssd_PEOPLE.log was 15 KB<br>
krb5_child.log was empty - 0 bytes.<br>
<br>
With thanks,<br>
<br>
Roberts<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a moz-do-not-send="true"
href="https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20131025/793bc202/attachment-0001.html"
target="_blank">https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20131025/793bc202/attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
_______________________________________________<br>
sssd-users mailing list<br>
<a moz-do-not-send="true"
href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
<a moz-do-not-send="true"
href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users"
target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
<br>
<br>
End of sssd-users Digest, Vol 18, Issue 29<br>
******************************************<br>
</blockquote>
</div>
<br>
<br clear="all">
<br>
-- <br>
==<br>
Roberts Klotins<br>
<br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
sssd-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a>
<a class="moz-txt-link-freetext" href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a>
</pre>
</blockquote>
<br>
<br>
Data comes from nsswitch.conf and pam.conf and specific pam
configurations.<br>
What is says is that SSSD is configured for authentication and
identity lookups but that your SSSD is not configured to use IPA.<br>
This is as much as I can see from the output.<br>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
</body>
</html>