Re: [Freeipa-users] Trying To Debug AD Trust Quirks

2017-03-29 Thread Jakub Hrozek
On Tue, Mar 28, 2017 at 11:59:27AM -0500, Jason B. Nance wrote: > Hello, > > I'm using AD trusts with FreeIPA 4.4.0 and am having a heck of a time with > strange behavior. Some examples include: > > - Trust user's home directory sporadically getting set to '/' instead of > /home/domain/user >

Re: [Freeipa-users] Trying To Debug AD Trust Quirks

2017-03-29 Thread Jakub Hrozek
On Tue, Mar 28, 2017 at 11:59:27AM -0500, Jason B. Nance wrote: > My other question is if there is a way to pin down a client to > [temporarily] use a specific IPA server using the ipa_server directive in sssd.conf > and specific AD server (even if > it means a firewall rule that only allows

[Freeipa-users] Trying To Debug AD Trust Quirks

2017-03-28 Thread Jason B. Nance
Hello, I'm using AD trusts with FreeIPA 4.4.0 and am having a heck of a time with strange behavior. Some examples include: - Trust user's home directory sporadically getting set to '/' instead of /home/domain/user - Trust user losing HBAC privileges (granted via group membership) - Trust user