Re: [Freeipa-users] Unable to ssh after establishing trust

2016-07-20 Thread pgb205
iv1956000891WordSection1 {}#yiv1956000891 From: freeipa-users-boun...@redhat.com [mailto:freeipa-users-boun...@redhat.com] On Behalf Ofpgb205 Sent: Wednesday, 20 July 2016 5:28 AM To: Sumit Bose Cc: Freeipa-users Subject: Re: [Freeipa-users] Unable to ssh after establishing trust   well...I'm

Re: [Freeipa-users] Unable to ssh after establishing trust

2016-07-19 Thread Simpson Lachlan
From: freeipa-users-boun...@redhat.com [mailto:freeipa-users-boun...@redhat.com] On Behalf Of pgb205 Sent: Wednesday, 20 July 2016 5:28 AM To: Sumit Bose Cc: Freeipa-users Subject: Re: [Freeipa-users] Unable to ssh after establishing trust well...I'm not sure what I changed, if anything, but I

Re: [Freeipa-users] Unable to ssh after establishing trust

2016-07-19 Thread pgb205
━ > From: Sumit Bose <sb...@redhat.com> > To: pgb205 <pgb...@yahoo.com> > Cc: Sumit Bose <sb...@redhat.com>; Freeipa-users <freeipa-users@redhat.com> > Sent: Wednesday, July 13, 2016 5:43 AM > S

Re: [Freeipa-users] Unable to ssh after establishing trust

2016-07-19 Thread pgb205
sers@redhat.com> Sent: Tuesday, July 19, 2016 3:33 AM Subject: Re: [Freeipa-users] Unable to ssh after establishing trust On Mon, Jul 18, 2016 at 09:21:07PM +, pgb205 wrote: > Sumit, > > I have set the names of all the Domain Controllers to be resolvable to the IP > of the o

Re: [Freeipa-users] Unable to ssh after establishing trust

2016-07-19 Thread Sumit Bose
━ > From: Sumit Bose <sb...@redhat.com> > To: pgb205 <pgb...@yahoo.com> > Cc: Sumit Bose <sb...@redhat.com>; Freeipa-users <freeipa-users@redhat.com> > Sent: Wednesday, July 13, 2016 5:43 AM > Subject: Re: [Freeipa-users] Unable to ssh after esta

Re: [Freeipa-users] Unable to ssh after establishing trust

2016-07-18 Thread pgb205
5 <pgb...@yahoo.com> Cc: Sumit Bose <sb...@redhat.com>; Freeipa-users <freeipa-users@redhat.com> Sent: Wednesday, July 13, 2016 5:43 AM Subject: Re: [Freeipa-users] Unable to ssh after establishing trust On Tue, Jul 12, 2016 at 06:40:22PM +, pgb205 wrote: > +freeip

Re: [Freeipa-users] Unable to ssh after establishing trust

2016-07-13 Thread Sumit Bose
On Tue, Jul 12, 2016 at 06:40:22PM +, pgb205 wrote: > +freeipa-users list > > From: pgb205 <pgb...@yahoo.com> > To: Sumit Bose <sb...@redhat.com> > Sent: Tuesday, July 12, 2016 2:12 PM > Subject: Re: [Freeipa-users] Unable to ssh after establishi

Re: [Freeipa-users] Unable to ssh after establishing trust

2016-07-12 Thread pgb205
+freeipa-users list From: pgb205 <pgb...@yahoo.com> To: Sumit Bose <sb...@redhat.com> Sent: Tuesday, July 12, 2016 2:12 PM Subject: Re: [Freeipa-users] Unable to ssh after establishing trust Sumit, thanks for replying So the first issue is my fault, probably

Re: [Freeipa-users] Unable to ssh after establishing trust

2016-07-11 Thread Sumit Bose
On Mon, Jul 11, 2016 at 03:46:57AM +, pgb205 wrote: > I have successfully established trust and am able to obtain ticket granting > ticketkinit user@AD_DOMAIN.COMI can also do kinit admin@IPA_DOMAIN.COMssh > admin@IPA_DOMAIN.COM also works > however, ssh user@AD_DOMAIN.COM or

Re: [Freeipa-users] Unable to ssh after establishing trust

2016-07-11 Thread Lachlan Musicman
Have you set up the external group and internal group as required in IPA? The server you are trying to log into - you have added this to the IPA server using ipa-client-install? When you are logged into the server that you want to login to as root (or local user), does `id user@ad_domain.com`

[Freeipa-users] Unable to ssh after establishing trust

2016-07-10 Thread pgb205
I have successfully established trust and am able to obtain ticket granting ticketkinit user@AD_DOMAIN.COMI can also do kinit admin@IPA_DOMAIN.COMssh admin@IPA_DOMAIN.COM also works however, ssh user@AD_DOMAIN.COM or user@ad_domain.com fails I have checked that there are no hbac rules other then