On Fri, 05 Jun 2015, Alexander Frolushkin wrote:
We have 17 IPA servers and AD trusts with user accounts from AD used to ssh
linux servers, with IPA's HBAC and SUDO.
Today on 4 of IPA servers we got
showing AD domain "offline"
and AD users missing some groups membership.
Is there some way to debug this issue?
1. Don't use wbinfo if you are running on RHEL7/Fedora 21+, it is not
useful at all.
2. if you have issues with memberships, follow
to generate meaningful logs.
Without logs it is impossible to grasp what you are experiencing.
/ Alexander Bokovoy
Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project