On Fri, 03 Apr 2015, Guertin, David S. wrote:
I don't see any request going to sssd.

Can you try with ju...@middlebury.edu? Old SSSD is incapable to see
MIDD\juser being the same as ju...@middlebury.edu.

When I try:

ssh -l 'ju...@middlebury.edu' yakko.ipa.middlebury.edu

There is no response for two minutes, followed by "Connection closed".

I've attached the resulting sssd_default.log and sssd_nss.log.
What slapi-nis and ipa packages are on the IPA master side?
This all looks like IPA masters don't have RHEL 7.1 update 1 packages
from https://rhn.redhat.com/errata/RHSA-2015-0728.html where exactly
this problem with initgroups was fixed.

/ Alexander Bokovoy

Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project

Reply via email to