Re: [Freeipa-users] Authenticating sudo with ipa on Centos

2013-10-21 Thread Rob Crittenden
Andrew Holway wrote: It is a bit strange that your ipa_domain and ipa_hostname are the same. I think the domain should be just local. I'd run klist -kt /etc/krb5.keytab to see what principals are in there. ipa_hostname = 192-168-0-110.local ipa_server = _srv_, 192-168-0-100.local Hi, I'm a

Re: [Freeipa-users] Authenticating sudo with ipa on Centos

2013-10-21 Thread Jakub Hrozek
On Mon, Oct 21, 2013 at 01:34:17PM -0400, Rob Crittenden wrote: Andrew Holway wrote: It is a bit strange that your ipa_domain and ipa_hostname are the same. I think the domain should be just local. I'd run klist -kt /etc/krb5.keytab to see what principals are in there. ipa_hostname =

Re: [Freeipa-users] Authenticating sudo with ipa on Centos

2013-10-21 Thread Andrew Holway
Hi, ipa_domain and ipa_hostname was indeed a config error. Also, using a .local domain caused all manner of problems. Thanks all for your help! Andrew On 21 October 2013 21:03, Jakub Hrozek jhro...@redhat.com wrote: On Mon, Oct 21, 2013 at 01:34:17PM -0400, Rob Crittenden wrote: Andrew

Re: [Freeipa-users] Authenticating sudo with ipa on Centos

2013-10-18 Thread Andrew Holway
It is a bit strange that your ipa_domain and ipa_hostname are the same. I think the domain should be just local. I'd run klist -kt /etc/krb5.keytab to see what principals are in there. ipa_hostname = 192-168-0-110.local ipa_server = _srv_, 192-168-0-100.local Hi, I'm a little confused. They

[Freeipa-users] Authenticating sudo with ipa on Centos

2013-10-17 Thread Andrew Holway
Hello, I have set up IPA on a private network and have hit some bumps configuring sudo access for the clients. kinit seems to work fine for both client and server, user and root. When I load the edited /etc/sssd/sssd.conf and try to change user passwords I get System is offline, password change

Re: [Freeipa-users] Authenticating sudo with ipa on Centos

2013-10-17 Thread Rob Crittenden
Andrew Holway wrote: Hello, I have set up IPA on a private network and have hit some bumps configuring sudo access for the clients. kinit seems to work fine for both client and server, user and root. When I load the edited /etc/sssd/sssd.conf and try to change user passwords I get System is