On Thu, Nov 07, 2013 at 08:47:35PM +0600, Arthur wrote: > I do not know, may be I am wrong somewhere, but I did not make any > extra things with config files, just run ipa-client-install and > everything seemed works fine.
ipa-client-install modifies /etc/nsswitch.conf and adds "sss" to the list of modules if not already there. > that worked for f17, f18, f19 with ipa-server on CentOS 6.3&6.4. I'm not sure about F-19 from the top of my head, sorry, but starting with F-20 at least you'll get sss configured right from the install time. > > Jakub Hrozek wrote: > >On Thu, Nov 07, 2013 at 09:44:21AM +0200, Alexander Bokovoy wrote: > >>On Wed, 06 Nov 2013, Dean Hunter wrote: > >> > >>>After building a new VM and configuring the IPA 3.3.2 client, Gnome > >>>seems to only perform a local log-in until the system is rebooted. SSH > >>>works with IPA, but not Gnome. Is this correct? Is there anything less > >>>disruptive than a reboot that I can do? > >>Restart gdm.service? > >>I'm not sure how gdm handles PAM auth. > >I think the reason is actually nsswitch.conf, not PAM. Usually > >applications need to be restarted in order to notice changes to > >nsswitch.conf. That's also the reason why recent Fedora releases put > >"sss" to nsswitch.conf by default. > > > >_______________________________________________ > >Freeipa-users mailing list > >Freeipaemail@example.com > >https://www.redhat.com/mailman/listinfo/freeipa-users > > _______________________________________________ > Freeipa-users mailing list > Freeipafirstname.lastname@example.org > https://www.redhat.com/mailman/listinfo/freeipa-users _______________________________________________ Freeipa-users mailing list Freeipaemail@example.com https://www.redhat.com/mailman/listinfo/freeipa-users