[Freeipa-users] Re: Ubuntu 22 and sssd 2.6.3

2022-08-25 Thread Ranbir via FreeIPA-users
On Thu, 2022-08-25 at 19:41 +0100, Sam Morris via FreeIPA-users wrote: > Interesting. After installing sssd on a fresh system there isn't an > /etc/sssd/sssd.conf file. I guess ipa-client-install ultimately needs > to > make sure it's not enabling services that are already enabled via > socket

[Freeipa-users] Re: Ubuntu 22 and sssd 2.6.3

2022-08-25 Thread Ranbir via FreeIPA-users
On Thu, 2022-08-25 at 18:44 +0100, Sam Morris via FreeIPA-users wrote: > I thought krb5-pkinit is only needed if you want to use PKINIT? sssd > uses the host/$HOSTNAME principal to establish a FAST channel for > pre-authentication, so I don't see how krb5-pkinit affects things? My goal there

[Freeipa-users] Re: Ubuntu 22 and sssd 2.6.3

2022-08-25 Thread Sam Morris via FreeIPA-users
On 25/08/2022 05:41, Ranbir via FreeIPA-users wrote: After enabling debug_level 9, I managed to figure out that my test client was missing the krb5-pkinit package so I installed that. I thought krb5-pkinit is only needed if you want to use PKINIT? sssd uses the host/$HOSTNAME principal to

[Freeipa-users] Re: Ubuntu 22 and sssd 2.6.3

2022-08-25 Thread Ranbir via FreeIPA-users
On Thu, 2022-08-25 at 09:42 +0300, Sami Hulkko via FreeIPA-users wrote: > No probs in Ubuntu 22.04.1 thats for shore.  Well, that's encouraging. What does your sssd.conf look like? Which version of freeipa are you using? Also, is your freeipa domain in a trust with AD? My CentOS, Rocky Linux

[Freeipa-users] Re: Ubuntu 22 and sssd 2.6.3

2022-08-25 Thread Ranbir via FreeIPA-users
On Thu, 2022-08-25 at 09:35 -0400, Rob Crittenden wrote: > I'd suggest you open Ubuntu bugs on the missing dependency and > services > issue. I've already found bug entries about the services problem; I don't recall if they were closed. But, considering I'm seeing the same issue as described in

[Freeipa-users] Re: Ubuntu 22 and sssd 2.6.3

2022-08-25 Thread Rob Crittenden via FreeIPA-users
Ranbir via FreeIPA-users wrote: > Hello All, > > Has anyone successfully enrolled an Ubuntu 22 client into an AlmaLinux > 9 IdM or Rocky Linux 9 IdM domain in a trust with AD _and_ managed to > have consistently fast and reliable logins into that Ubuntu 22 client > with AD users? I sure haven't.

[Freeipa-users] Re: Ubuntu 22 and sssd 2.6.3

2022-08-25 Thread Sami Hulkko via FreeIPA-users
'TRIED' vs 'TIRED' I do not do this kind of spelling mistakes. That is the reason nothing works on your system. SH On 25/08/2022 09:42, Sami Hulkko via FreeIPA-users wrote: Hi, No probs in Ubuntu 22.04.1 thats for shore. Ever tired with real thing? SH On 25/08/2022 07:41, Ranbir via

[Freeipa-users] Re: Ubuntu 22 and sssd 2.6.3

2022-08-25 Thread Sami Hulkko via FreeIPA-users
Hi, No probs in Ubuntu 22.04.1 thats for shore. Ever tired with real thing? SH On 25/08/2022 07:41, Ranbir via FreeIPA-users wrote: Hello All, Has anyone successfully enrolled an Ubuntu 22 client into an AlmaLinux 9 IdM or Rocky Linux 9 IdM domain in a trust with AD _and_ managed to have