On Fri, 03 Apr 2015, Guertin, David S. wrote:
I don't see any request going to sssd.

Can you try with ju...@middlebury.edu? Old SSSD is incapable to see
MIDD\juser being the same as ju...@middlebury.edu.

When I try:

ssh -l 'ju...@middlebury.edu' yakko.ipa.middlebury.edu

There is no response for two minutes, followed by "Connection closed".

I've attached the resulting sssd_default.log and sssd_nss.log.
What slapi-nis and ipa packages are on the IPA master side?
This all looks like IPA masters don't have RHEL 7.1 update 1 packages
from https://rhn.redhat.com/errata/RHSA-2015-0728.html where exactly
this problem with initgroups was fixed.

--
/ Alexander Bokovoy

--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Reply via email to