iv1956000891WordSection1 {}#yiv1956000891 From:
freeipa-users-boun...@redhat.com [mailto:freeipa-users-boun...@redhat.com] On
Behalf Ofpgb205
Sent: Wednesday, 20 July 2016 5:28 AM
To: Sumit Bose
Cc: Freeipa-users
Subject: Re: [Freeipa-users] Unable to ssh after establishing trust
well...I'm
From: freeipa-users-boun...@redhat.com
[mailto:freeipa-users-boun...@redhat.com] On Behalf Of pgb205
Sent: Wednesday, 20 July 2016 5:28 AM
To: Sumit Bose
Cc: Freeipa-users
Subject: Re: [Freeipa-users] Unable to ssh after establishing trust
well...I'm not sure what I changed, if anything, but I
━
> From: Sumit Bose <sb...@redhat.com>
> To: pgb205 <pgb...@yahoo.com>
> Cc: Sumit Bose <sb...@redhat.com>; Freeipa-users <freeipa-users@redhat.com>
> Sent: Wednesday, July 13, 2016 5:43 AM
> S
sers@redhat.com>
Sent: Tuesday, July 19, 2016 3:33 AM
Subject: Re: [Freeipa-users] Unable to ssh after establishing trust
On Mon, Jul 18, 2016 at 09:21:07PM +, pgb205 wrote:
> Sumit,
>
> I have set the names of all the Domain Controllers to be resolvable to the IP
> of the o
━
> From: Sumit Bose <sb...@redhat.com>
> To: pgb205 <pgb...@yahoo.com>
> Cc: Sumit Bose <sb...@redhat.com>; Freeipa-users <freeipa-users@redhat.com>
> Sent: Wednesday, July 13, 2016 5:43 AM
> Subject: Re: [Freeipa-users] Unable to ssh after esta
5 <pgb...@yahoo.com>
Cc: Sumit Bose <sb...@redhat.com>; Freeipa-users <freeipa-users@redhat.com>
Sent: Wednesday, July 13, 2016 5:43 AM
Subject: Re: [Freeipa-users] Unable to ssh after establishing trust
On Tue, Jul 12, 2016 at 06:40:22PM +, pgb205 wrote:
> +freeip
On Tue, Jul 12, 2016 at 06:40:22PM +, pgb205 wrote:
> +freeipa-users list
>
> From: pgb205 <pgb...@yahoo.com>
> To: Sumit Bose <sb...@redhat.com>
> Sent: Tuesday, July 12, 2016 2:12 PM
> Subject: Re: [Freeipa-users] Unable to ssh after establishi
+freeipa-users list
From: pgb205 <pgb...@yahoo.com>
To: Sumit Bose <sb...@redhat.com>
Sent: Tuesday, July 12, 2016 2:12 PM
Subject: Re: [Freeipa-users] Unable to ssh after establishing trust
Sumit, thanks for replying
So the first issue is my fault, probably
On Mon, Jul 11, 2016 at 03:46:57AM +, pgb205 wrote:
> I have successfully established trust and am able to obtain ticket granting
> ticketkinit user@AD_DOMAIN.COMI can also do kinit admin@IPA_DOMAIN.COMssh
> admin@IPA_DOMAIN.COM also works
> however, ssh user@AD_DOMAIN.COM or
Have you set up the external group and internal group as required in IPA?
The server you are trying to log into - you have added this to the IPA
server using ipa-client-install?
When you are logged into the server that you want to login to as root (or
local user), does `id user@ad_domain.com`
I have successfully established trust and am able to obtain ticket granting
ticketkinit user@AD_DOMAIN.COMI can also do kinit admin@IPA_DOMAIN.COMssh
admin@IPA_DOMAIN.COM also works
however, ssh user@AD_DOMAIN.COM or user@ad_domain.com fails
I have checked that there are no hbac rules other then
11 matches
Mail list logo