<div dir="ltr">I login via ssh to the server with SecureCRT and openssh from another server. No difference in the result.</div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Apr 14, 2015 at 7:50 PM, Jakub Hrozek <span dir="ltr"><<a href="mailto:jhrozek@redhat.com" target="_blank">jhrozek@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="HOEnZb"><div class="h5">On Tue, Apr 14, 2015 at 07:14:11PM +0200, Ola Nystrom wrote:<br>
> I have a problem with getting a krb-ticket when logging in to my CentOS 6.6<br>
> server.<br>
> Any idea on how to troubleshoot?<br>
><br>
> after login with AD-credentionals<br>
><br>
> > [ola@galaxy ~]$ klist<br>
> > klist: No credentials cache found while retrieving principal name<br>
><br>
><br>
><br>
> > [ola@galaxy ~]$ sssd --version<br>
><br>
> 1.11.6<br>
><br>
><br>
> kerberos looks like it works, and the same config works on CentOS7.1<br>
><br>
> sssd -i -d9 log filtered with krb<br>
> <a href="http://pastebin.com/XywvGEmR" target="_blank">http://pastebin.com/XywvGEmR</a><br>
><br>
> [ola@galaxy ~]$ kinit<br>
> Password for ola@ENSKEDE.LOCAL:<br>
> [ola@galaxy ~]$ klist<br>
> Ticket cache: KEYRING:persistent:11103<br>
> Default principal: ola@ENSKEDE.LOCAL<br>
><br>
><br>
> Valid starting Expires Service principal<br>
> 04/14/15 19:11:12 04/15/15 05:11:15 krbtgt/ENSKEDE.LOCAL@ENSKEDE.LOCAL<br>
> renew until 04/21/15 19:11:12<br>
><br>
><br>
><br>
> my sssd.conf<br>
> [ola@galaxy ~]$ sudo cat /etc/sssd/sssd.conf<br>
> [sudo] password for ola:<br>
> [sssd]<br>
> domains = ENSKEDE.LOCAL<br>
> services = nss, pam, pac<br>
> config_file_version = 2<br>
><br>
> [domain/ENSKEDE.LOCAL]<br>
> id_provider = ad<br>
> auth_provider = ad<br>
> access_provider = ad<br>
> chpass_provider = ad<br>
> cache_credentials = true<br>
> ldap_id_mapping = False<br>
> ldap_referrals = false<br>
> krb5_use_kdcinfo = false<br>
> krb5_store_password_if_offline = true<br>
><br>
> [ola@galaxy ~]$ cat /etc/krb5.conf<br>
> [logging]<br>
> default = FILE:/var/log/krb5libs.log<br>
> kdc = FILE:/var/log/krb5kdc.log<br>
> admin_server = FILE:/var/log/kadmind.log<br>
><br>
> [libdefaults]<br>
> default_realm = ENSKEDE.LOCAL<br>
> dns_lookup_realm = true<br>
> dns_lookup_kdc = true<br>
> ticket_lifetime = 24h<br>
> renew_lifetime = 7d<br>
> forwardable = true<br>
> rdns = false<br>
> default_ccache_name = KEYRING:persistent:%{uid}<br>
><br>
><br>
> Any idea on how to troubleshoot?<br>
<br>
</div></div>This document might be a good start:<br>
<a href="https://fedorahosted.org/sssd/wiki/Troubleshooting" target="_blank">https://fedorahosted.org/sssd/wiki/Troubleshooting</a><br>
along with describing how exactly you logged in (su from root would be<br>
expected to not yield any ccache)<br>
_______________________________________________<br>
sssd-users mailing list<br>
<a href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature">Ola Nyström<br><br>“OSI model jokes work on so many levels”<br>— jorge_rbs</div>
</div>