Am 25.11.2015 um 09:28 schrieb Torsten Harenberg:
Dear all,

just wanna ask if anyone has successfully managed to get the freeipa
client to work on a recent Linux Mint.

While Mint should be more or less compatible to Ubuntu 14.04, and I had
no problems getting it to run on Ubuntu, I failed to get it working on Mint.

The installation process went smoothly and not different to those on
Ubuntu. I just found libpam-sss not being installed as dependency.

Kerberos seems to work okay as well, I can get a Kerberos token.

But the user names are not resolved, all IPA users are unknown.

I already checked /etc/nsswitch.conf and /etc/pam.d/*, but could not
found a real difference which could explain that.

For me it sounds like NSS can't resolve IPA users, which is done by
libnss_sss package (on Debian, but should be the same for Ubuntu/Mint).
If I remember correctly libnss_sss is no hard dependency on SSSD,
so maybe it didn't get installed along with SSSD.

What I found is a possibility

which seem to work, BUT this is getting the users through LDAP not sssd.
That was not needed for Ubuntu.

I tried to use both the provided packages as well as the ppa
repositories for both sssd and freeipa-client.

I raised the log level for sssd but even with a high log level I
couldn't identify an error.

Best regards,


Manage your subscription for the Freeipa-users mailing list:
Go to for more info on the project

Reply via email to