[Freeipa-users] RHEL 5.11 as IPA client

2015-06-10 Thread Alexander Frolushkin
Hello. We cannot login to our IPA enrolled RHEL 5.11 host using any IPA (4.1) native or AD trusted users. Seems like it fails on connection to server. SSSD logs attached. Additionally, is it ever possible now to use AD trusted users to ssh RHEL 5 servers? Logs and sssd config attached. WBR,

Re: [Freeipa-users] RHEL 5.11 as IPA client

2015-06-10 Thread Alexander Bokovoy
On Wed, 10 Jun 2015, Alexander Frolushkin wrote: Hello. We cannot login to our IPA enrolled RHEL 5.11 host using any IPA (4.1) native or AD trusted users. Seems like it fails on connection to server. SSSD logs attached. Additionally, is it ever possible now to use AD trusted users to ssh RHEL 5

Re: [Freeipa-users] RHEL 5.11 as IPA client

2015-06-10 Thread Alexander Frolushkin
@redhat.com Subject: Re: [Freeipa-users] RHEL 5.11 as IPA client On Wed, 10 Jun 2015, Alexander Frolushkin wrote: This is not good at all... Firstly old sssd, now crypto issues... Can you also say, will HBAC and SUDO in IPA work for trusted AD users on RHEL 5 servers if we will enable vulnerable tls

Re: [Freeipa-users] RHEL 5.11 as IPA client

2015-06-10 Thread Alexander Frolushkin
Bokovoy [mailto:aboko...@redhat.com] Sent: Wednesday, June 10, 2015 4:30 PM To: Alexander Frolushkin (SIB) Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] RHEL 5.11 as IPA client On Wed, 10 Jun 2015, Alexander Frolushkin wrote: Hello. We cannot login to our IPA enrolled RHEL 5.11 host

Re: [Freeipa-users] RHEL 5.11 as IPA client

2015-06-10 Thread Alexander Bokovoy
On Wed, 10 Jun 2015, Alexander Frolushkin wrote: This is not good at all... Firstly old sssd, now crypto issues... Can you also say, will HBAC and SUDO in IPA work for trusted AD users on RHEL 5 servers if we will enable vulnerable tls? SSSD on RHEL 5 does not support SUDO natively, look at