Re: [Freeipa-users] ssh login from windows AD trust host not working

2013-04-20 Thread Natxo Asenjo
On Sat, Apr 20, 2013 at 8:32 PM, Sumit Bose wrote: > On Fri, Apr 19, 2013 at 10:14:36PM +0200, Natxo Asenjo wrote: > > > # wbinfo --online-status > > BUILTIN : online > > IPA : online > > AD : offline > > > > # wbinfo --domain-info ad.asenjo.nx > > Name : AD > > Alt_Name : a

Re: [Freeipa-users] ssh login from windows AD trust host not working

2013-04-20 Thread Sumit Bose
On Fri, Apr 19, 2013 at 10:14:36PM +0200, Natxo Asenjo wrote: > hi, > > a bit puzzled now. I have joined another 2k8r2 host to the AD domain that > is trusted by the ipa domain. > > As AD\administrator I can ssh to the linux host. > > I create a bunch of AD users, standard members of 'Domain Use

Re: [Freeipa-users] ssh login from windows AD trust host not working

2013-04-19 Thread Natxo Asenjo
hi, a bit puzzled now. I have joined another 2k8r2 host to the AD domain that is trusted by the ipa domain. As AD\administrator I can ssh to the linux host. I create a bunch of AD users, standard members of 'Domain Users'. But I cannot login to the linux host. When I run wbinfo --online-status

Re: [Freeipa-users] ssh login from windows AD trust host not working

2013-04-19 Thread Alexander Bokovoy
On Fri, 19 Apr 2013, Natxo Asenjo wrote: hi, some progress. I disabled the firewall of the linux host (also the kdc, incidentally). From the Windows host using the AD Domain and Trusts tool I can verify the trust and using putty I can login and get the linux kerberos tickets as a windows realm u

Re: [Freeipa-users] ssh login from windows AD trust host not working

2013-04-19 Thread Natxo Asenjo
hi, some progress. I disabled the firewall of the linux host (also the kdc, incidentally). From the Windows host using the AD Domain and Trusts tool I can verify the trust and using putty I can login and get the linux kerberos tickets as a windows realm user. If i enable the firewall and I do not

[Freeipa-users] ssh login from windows AD trust host not working

2013-04-19 Thread Natxo Asenjo
hi, after succesfully configuring the trust between 2 different domains (IPA.ASENJO.NX and AD.ASENJO.NX) I would like to login from the windows host to the linux host using the trusted kerberos tickets. This is my krb.conf in the linux host: includedir /var/lib/sss/pubconf/krb5.include.d/ [loggi