<html>
  <head>
    <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    On 10/26/2013 06:36 AM, Roberts Klotiņš wrote:
    <blockquote
cite="mid:CALr2nHt-86LB22FwQFyjdV_6-1_G6boivdJi0OOCiJ7Y-FO_XA@mail.gmail.com"
      type="cite">
      <div dir="ltr">
        <div>
          <div>
            <div>The last thought that occurred was to run authconfig
              --test. Authconfig apparently is the command used by
              various frontends so I thought output from it could point
              to the problem<br>
              <br>
            </div>
            I wish the output would have made more  sense to me - it
            does not quite indicate which files the answers come from.<br>
            <br>
            $ sudo authconfig --test<br>
            caching is enabled<br>
            nss_files is always enabled<br>
            nss_compat is disabled<br>
            nss_db is disabled<br>
            nss_hesiod is disabled<br>
             hesiod LHS = ""<br>
             hesiod RHS = ""<br>
            nss_ldap is disabled<br>
             LDAP+TLS is disabled<br>
             LDAP server = <a class="moz-txt-link-rfc2396E" href="ldap://SRV1.people.local">"ldap://SRV1.people.local"</a><br>
             LDAP base DN = "dc=people,dc=local"<br>
            nss_nis is disabled<br>
             NIS server = ""<br>
             NIS domain = ""<br>
            nss_nisplus is disabled<br>
            nss_winbind is disabled<br>
             SMB workgroup = "PEOPLE"<br>
             SMB servers = "SRV1.PEOPLE.LOCAL"<br>
             SMB security = "ads"<br>
             SMB realm = "PEOPLE.LOCAL"<br>
             Winbind template shell = "/bin/false"<br>
             SMB idmap range = "16777216-33554431"<br>
            nss_sss is enabled by default<br>
            nss_wins is disabled<br>
            nss_mdns4_minimal is disabled<br>
            DNS preference over NSS or WINS is disabled<br>
            pam_unix is always enabled<br>
             shadow passwords are enabled<br>
             password hashing algorithm is sha512<br>
            pam_krb5 is disabled<br>
             krb5 realm = ""<br>
             krb5 realm via dns is disabled<br>
             krb5 kdc = ""<br>
             krb5 kdc via dns is disabled<br>
             krb5 admin server = ""<br>
            pam_ldap is disabled<br>
             LDAP+TLS is disabled<br>
             LDAP server = <a class="moz-txt-link-rfc2396E" href="ldap://SRV1.people.local">"ldap://SRV1.people.local"</a><br>
             LDAP base DN = "dc=people,dc=local"<br>
             LDAP schema = "rfc2307"<br>
            pam_pkcs11 is disabled<br>
             use only smartcard for login is disabled<br>
             smartcard module = "coolkey"<br>
             smartcard removal action = "Ignore"<br>
            pam_fprintd is disabled<br>
            pam_ecryptfs is disabled<br>
            pam_winbind is disabled<br>
             SMB workgroup = "PEOPLE"<br>
             SMB servers = "SRV1.PEOPLE.LOCAL"<br>
             SMB security = "ads"<br>
             SMB realm = "PEOPLE.LOCAL"<br>
            pam_sss is enabled by default<br>
             credential caching in SSSD is enabled<br>
             SSSD use instead of legacy services if possible is enabled<br>
            IPAv2 is disabled<br>
            IPAv2 domain was not joined<br>
             IPAv2 server = ""<br>
             IPAv2 realm = ""<br>
             IPAv2 domain = ""<br>
            pam_pwquality is enabled (try_first_pass retry=3
            authtok_type=)<br>
            pam_passwdqc is disabled ()<br>
            pam_access is disabled ()<br>
            pam_mkhomedir or pam_oddjob_mkhomedir is enabled ()<br>
            Always authorize local users is enabled ()<br>
            Authenticate system accounts against network services is
            disabled<br>
            $<br>
            <br>
          </div>
          Thanks for looking at this,<br>
          <br>
        </div>
        Roberts<br>
        <div>
          <div><br clear="all">
            <div>
              <div><br>
                -- <br>
                ==<br>
                Roberts Klotins<br>
                <br>
              </div>
            </div>
            <br>
          </div>
        </div>
        <div class="gmail_extra"><br>
          <br>
          <div class="gmail_quote">On 25 October 2013 13:00, <span
              dir="ltr">&lt;<a moz-do-not-send="true"
                href="mailto:sssd-users-request@lists.fedorahosted.org"
                target="_blank">sssd-users-request@lists.fedorahosted.org</a>&gt;</span>
            wrote:<br>
            <blockquote class="gmail_quote" style="margin:0 0 0
              .8ex;border-left:1px #ccc solid;padding-left:1ex">Send
              sssd-users mailing list submissions to<br>
                      <a moz-do-not-send="true"
                href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
              <br>
              To subscribe or unsubscribe via the World Wide Web, visit<br>
                      <a moz-do-not-send="true"
                href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users"
                target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
              or, via email, send a message with subject or body 'help'
              to<br>
                      <a moz-do-not-send="true"
                href="mailto:sssd-users-request@lists.fedorahosted.org">sssd-users-request@lists.fedorahosted.org</a><br>
              <br>
              You can reach the person managing the list at<br>
                      <a moz-do-not-send="true"
                href="mailto:sssd-users-owner@lists.fedorahosted.org">sssd-users-owner@lists.fedorahosted.org</a><br>
              <br>
              When replying, please edit your Subject line so it is more
              specific<br>
              than "Re: Contents of sssd-users digest..."<br>
              <br>
              <br>
              Today's Topics:<br>
              <br>
                 1. Re:  sssd-users Digest, Vol 18, Issue 25 (Jakub
              Hrozek)<br>
                 2.  sssd - GDM login (Roberts Klotiņš)<br>
              <br>
              <br>
----------------------------------------------------------------------<br>
              <br>
              Message: 1<br>
              Date: Fri, 25 Oct 2013 10:02:15 +0200<br>
              From: Jakub Hrozek &lt;<a moz-do-not-send="true"
                href="mailto:jhrozek@redhat.com">jhrozek@redhat.com</a>&gt;<br>
              To: <a moz-do-not-send="true"
                href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
              Subject: Re: [SSSD-users] sssd-users Digest, Vol 18, Issue
              25<br>
              Message-ID: &lt;<a moz-do-not-send="true"
                href="mailto:20131025080215.GC7624@hendrix.brq.redhat.com">20131025080215.GC7624@hendrix.brq.redhat.com</a>&gt;<br>
              Content-Type: text/plain; charset=utf-8<br>
              <br>
              On Fri, Oct 25, 2013 at 09:58:48AM +0200, Jakub Hrozek
              wrote:<br>
              &gt; On Fri, Oct 25, 2013 at 02:25:04AM +0100, Roberts
              Klotiņš wrote:<br>
              &gt; &gt; Hi again, still trying to understand how to make
              the setup to work.<br>
              &gt; &gt;<br>
              &gt; &gt; As the very last thing I thought to check into
              /etc/sysconfig/authconfig.<br>
              &gt; &gt; What I found was that usekerberos and useldap
              were set to no. Maybe they<br>
              &gt; &gt; (or at least kerberos) need to be set to yes?<br>
              &gt; &gt;<br>
              &gt;<br>
              &gt; Did you have a chance to gather the debug logs I
              asked about earlier?<br>
              <br>
              Ah, sorry, it was stuck in moderation. I let that e-mail
              through.<br>
              <br>
              <br>
              ------------------------------<br>
              <br>
              Message: 2<br>
              Date: Fri, 25 Oct 2013 09:47:27 +0100<br>
              From: Roberts Klotiņš &lt;<a moz-do-not-send="true"
                href="mailto:roberts.klotins@gmail.com">roberts.klotins@gmail.com</a>&gt;<br>
              To: <a moz-do-not-send="true"
                href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
              Subject: [SSSD-users] sssd - GDM login<br>
              Message-ID:<br>
                      &lt;CALr2nHsBoDisjrDoTrMX7uNBJTwrBDvsUAeQQbR=<a
                moz-do-not-send="true"
                href="mailto:8pFDHxRUrw@mail.gmail.com">8pFDHxRUrw@mail.gmail.com</a>&gt;<br>
              Content-Type: text/plain; charset="utf-8"<br>
              <br>
              Hi,<br>
              <br>
              I did send them to the list, but at debug level 7
              sssd_PEOPLE.log file they<br>
              were about 15s KB in total and I sent them as an
              attachment. I was told to<br>
              await till the post is approved by moderator because size
              over 40KB.<br>
              <br>
              I now put this same file edited for usernames and more
              descriptive host<br>
              names on<br>
              <br>
              <a moz-do-not-send="true"
                href="http://pastebin.com/ZRkmMgi6" target="_blank">http://pastebin.com/ZRkmMgi6</a><br>
              <br>
              sssd_PEOPLE.log was 15 KB<br>
              krb5_child.log was empty - 0 bytes.<br>
              <br>
              With thanks,<br>
              <br>
              Roberts<br>
              -------------- next part --------------<br>
              An HTML attachment was scrubbed...<br>
              URL: &lt;<a moz-do-not-send="true"
href="https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20131025/793bc202/attachment-0001.html"
                target="_blank">https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20131025/793bc202/attachment-0001.html</a>&gt;<br>
              <br>
              ------------------------------<br>
              <br>
              _______________________________________________<br>
              sssd-users mailing list<br>
              <a moz-do-not-send="true"
                href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
              <a moz-do-not-send="true"
                href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users"
                target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
              <br>
              <br>
              End of sssd-users Digest, Vol 18, Issue 29<br>
              ******************************************<br>
            </blockquote>
          </div>
          <br>
          <br clear="all">
          <br>
          -- <br>
          ==<br>
          Roberts Klotins<br>
          <br>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
sssd-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a>
<a class="moz-txt-link-freetext" href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a>
</pre>
    </blockquote>
    <br>
    <br>
    Data comes from nsswitch.conf and pam.conf and specific pam
    configurations.<br>
    What is says is that SSSD is configured for authentication and
    identity lookups but that your SSSD is not configured to use IPA.<br>
    This is as much as I can see from the output.<br>
    <br>
    <br>
    <pre class="moz-signature" cols="72">-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager for IdM portfolio
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
<a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>


</pre>
  </body>
</html>