On Fri, Nov 27, 2015 at 05:35:42PM +0100, Morgan Marodin wrote: > Hi Sumit. > > I don't know why, but now kerberos ticket authentication is working on 6.7 > clients. > On 7.2 clients now password authetications with Active Directory > credentials is working ... but not with kerberos ticket.
This is most likely due to some issues while mapping the Kerberos principal to the local user name. Do you have a 'includedir /var/lib/sss/pubconf/krb5.include.d/' line at the beginning of you krb5.conf file? Does /var/lib/sss/pubconf/krb5.include.d/localauth_plugin exists? bye, Sumit -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project