On Wed, Feb 05, 2014 at 01:44:13PM -0500, Mark Gardner wrote:
> Okay,
> 
> Spent some time on this one...
> Some users can login SSO no problem, others have to put in their password.
> 
> Strange as it seems,  if the length of the username was greater than 4, the
> SSO worked.
> So [email protected] works, but [email protected] doesn't.

Can you send the mapping you use in krb5.conf? Can you check if there
are .k5login files in the home directories of the users where SSO is
working?

bye,
Sumit

> 
> My guess is something to do with the NetBios name length?
> 
> Fedora 20 IPA Server
> CentOS 6.5 IPA Client
> Win 2012 AD Domain Server
> 
> Setup as IPA as a subdomain of AD.
> AD Domain: test.local
> IPA Domain: hosted.test.local

> _______________________________________________
> Freeipa-users mailing list
> [email protected]
> https://www.redhat.com/mailman/listinfo/freeipa-users

_______________________________________________
Freeipa-users mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to