Re: [Freeipa-users] Unable to resolve AD users from IPA clients

2017-01-03 Thread Jakub Hrozek
On Tue, Jan 03, 2017 at 03:39:19PM +0100, Jan Karásek wrote: > Hi, > > I have trouble with resolving AD users from my IPA clients. > > Environment: 2x IPA server with trust into AD - both IPA servers and clients > running latest rhel 7.3. > > IPA domain: vs.example.com > AD domain:

[Freeipa-users] Unable to resolve AD users from IPA clients

2017-01-03 Thread Jan Karásek
Hi, I have trouble with resolving AD users from my IPA clients. Environment: 2x IPA server with trust into AD - both IPA servers and clients running latest rhel 7.3. IPA domain: vs.example.com AD domain: example.com, cen.example.com All tstx users are in cen.example.com but their UPN

Re: [Freeipa-users] Unable to resolve AD users from IPA

2016-10-19 Thread Jan Karásek
at.com Subject: Re: [Freeipa-users] Unable to resolve AD users from IPA Message-ID: <20161019102831.GC9339@p.Speedport_W_724V_Typ_A_05011603_00_009> Content-Type: text/plain; charset=iso-8859-1 On Wed, Oct 19, 2016 at 12:08:01PM +0200, Jan Kar?sek wrote: > Hi, > > thank you for h

Re: [Freeipa-users] Unable to resolve AD users from IPA

2016-10-19 Thread Sumit Bose
On Wed, Oct 19, 2016 at 12:08:01PM +0200, Jan Karásek wrote: > Hi, > > thank you for help. > > This is my sssd.conf from server : > > [domain/vs.example.cz] > debug_level = 7 > cache_credentials = True > krb5_store_password_if_offline = True > ipa_domain = vs.example.cz > id_provider =

Re: [Freeipa-users] Unable to resolve AD users from IPA

2016-10-19 Thread Jan Karásek
d 1 results. > (Mon Oct 17 12:26:05 2016) [sssd[be[vs.example.cz]]] [sdap_save_user] > (0x0400): Save user > ... > > > I can provide full log from IPA server, but its quite long. Could you point > me what else I could try ? > > Thank you . > > Jan > >

Re: [Freeipa-users] Unable to resolve AD users from IPA client

2016-10-17 Thread Jakub Hrozek
On Mon, Oct 17, 2016 at 01:27:40PM +0200, Jan Karásek wrote: > Hi, > please can you help me with troubleshooting IPA clients in IPA - AD trust > scenario ? We have two IPA servers and couple of clients running on RHEl 6 > and 7. IPA is running on RHEL 7.2. > AD servers are in domains

Re: [Freeipa-users] Unable to resolve AD users from IPA client

2016-10-17 Thread Sumit Bose
On Mon, Oct 17, 2016 at 01:27:40PM +0200, Jan Karásek wrote: > Hi, > please can you help me with troubleshooting IPA clients in IPA - AD trust > scenario ? We have two IPA servers and couple of clients running on RHEl 6 > and 7. IPA is running on RHEL 7.2. > AD servers are in domains

[Freeipa-users] Unable to resolve AD users from IPA client

2016-10-17 Thread Jan Karásek
Hi, please can you help me with troubleshooting IPA clients in IPA - AD trust scenario ? We have two IPA servers and couple of clients running on RHEl 6 and 7. IPA is running on RHEL 7.2. AD servers are in domains example.cz, cen.example.cz. Test users sits in cen.example.cz. IPA is subdomain