On Fri, 03 Apr 2015, Guertin, David S. wrote:
I don't see any request going to sssd.
Can you try with ju...@middlebury.edu? Old SSSD is incapable to see
MIDD\juser being the same as ju...@middlebury.edu.
When I try:
ssh -l 'ju...@middlebury.edu' yakko.ipa.middlebury.edu
There is no response for two minutes, followed by "Connection closed".
I've attached the resulting sssd_default.log and sssd_nss.log.
What slapi-nis and ipa packages are on the IPA master side?
This all looks like IPA masters don't have RHEL 7.1 update 1 packages
from https://rhn.redhat.com/errata/RHSA-2015-0728.html where exactly
this problem with initgroups was fixed.
/ Alexander Bokovoy
Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project