Hi Alexander, thanx very much for your detailed answer. There is one problem, though: gss-proxy is not available for most of my systems (Debian, Ubuntu, RedHat 6, ...).
Its not in sssd 1.13.4, so I wonder if gss-proxy a part of the most recent freeipa releases? Regards Harri -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project