On Fri, Oct 11, 2019 at 07:55:51AM -0000, S Toulmonde via FreeIPA-users wrote:
> Hi Sumit,
> 
> I've tried all options:
> use_fully_qualified_names = False on server and client, a matrix of 
> true/false, same issue...

Hi,

I'm sorry I wasn't clear. use_fully_qualified_names must be 'True' (or
unset) on the IPA servers. And if there are issues I'd recommend to have
it set to 'True' on the client as well until the client is working as
expected.

Additionally, please set 'debug_level = 9' at least in the [nss] and
[domain/...] sections of sssd.conf on the IPA client, restart SSSD, call
'id aduser@ad.domain' and send the SSSD logs after the id command
returns.

Additionally the 'id aduser@ad.domain' from the IPA server would be
helpful.

bye,
Sumit

> 
> Thanks for your help!
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
> Fedora Code of Conduct: 
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org

Reply via email to