Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-06-12 Thread Bobby Prins
: Alexander Bokovoy aboko...@redhat.com Aan: Bobby Prins bobby.pr...@proxy.nl Cc: d...@redhat.com, freeipa-users@redhat.com Verzonden: Vrijdag 3 april 2015 14:26:17 Onderwerp: Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode On Fri, 03 Apr 2015, Bobby Prins wrote

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-06-11 Thread Bobby Prins
@redhat.com Verzonden: Vrijdag 3 april 2015 14:26:17 Onderwerp: Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode On Fri, 03 Apr 2015, Bobby Prins wrote: - Oorspronkelijk bericht - Van: Alexander Bokovoy aboko...@redhat.com Aan: Bobby Prins bobby.pr...@proxy.nl

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-06-11 Thread Alexander Bokovoy
: d...@redhat.com, freeipa-users@redhat.com Verzonden: Vrijdag 3 april 2015 14:26:17 Onderwerp: Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode On Fri, 03 Apr 2015, Bobby Prins wrote: - Oorspronkelijk bericht - Van: Alexander Bokovoy aboko...@redhat.com Aan

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-04-07 Thread Bobby Prins
: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode On Fri, 03 Apr 2015, Bobby Prins wrote: - Oorspronkelijk bericht - Van: Alexander Bokovoy aboko...@redhat.com Aan: Bobby Prins bobby.pr...@proxy.nl Cc: d...@redhat.com, freeipa-users@redhat.com Verzonden: Vrijdag 3

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-04-03 Thread Bobby Prins
On Mar 24, 2015, at 17:11, Dmitri Pal d...@redhat.com wrote: Seems like 15 sec timeout on the AIX side. Can you try with a user that does not have that many groups and see if that works? If it does then we should assume it is an AIX side timeout and focus on making sure the data gets

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-04-03 Thread Alexander Bokovoy
On Fri, 03 Apr 2015, Bobby Prins wrote: On Mar 24, 2015, at 17:11, Dmitri Pal d...@redhat.com wrote: Seems like 15 sec timeout on the AIX side. Can you try with a user that does not have that many groups and see if that works? If it does then we should assume it is an AIX side timeout and

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-04-03 Thread Alexander Bokovoy
On Fri, 03 Apr 2015, Bobby Prins wrote: - Oorspronkelijk bericht - Van: Alexander Bokovoy aboko...@redhat.com Aan: Bobby Prins bobby.pr...@proxy.nl Cc: d...@redhat.com, freeipa-users@redhat.com Verzonden: Vrijdag 3 april 2015 12:45:07 Onderwerp: Re: [Freeipa-users] 'Preauthentication

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-04-03 Thread Bobby Prins
- Oorspronkelijk bericht - Van: Alexander Bokovoy aboko...@redhat.com Aan: Bobby Prins bobby.pr...@proxy.nl Cc: d...@redhat.com, freeipa-users@redhat.com Verzonden: Vrijdag 3 april 2015 12:45:07 Onderwerp: Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode On Fri

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-04-03 Thread Bobby Prins
- Oorspronkelijk bericht - Van: Alexander Bokovoy aboko...@redhat.com Aan: Bobby Prins bobby.pr...@proxy.nl Cc: d...@redhat.com, freeipa-users@redhat.com Verzonden: Vrijdag 3 april 2015 14:26:17 Onderwerp: Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode On Fri

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-25 Thread Bobby Prins
maart 2015 15:13:38 Onderwerp: Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode On Tue, 24 Mar 2015, Bobby Prins wrote: - Oorspronkelijk bericht - Van: Alexander Bokovoy aboko...@redhat.com Aan: Bobby Prins bobby.pr...@proxy.nl Cc: d...@redhat.com

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-24 Thread Bobby Prins
- Oorspronkelijk bericht - Van: Alexander Bokovoy aboko...@redhat.com Aan: Bobby Prins bobby.pr...@proxy.nl Cc: d...@redhat.com, freeipa-users@redhat.com Verzonden: Maandag 23 maart 2015 16:44:47 Onderwerp: Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-24 Thread Dmitri Pal
On 03/24/2015 09:01 AM, Bobby Prins wrote: - Oorspronkelijk bericht - Van: Alexander Bokovoy aboko...@redhat.com Aan: Bobby Prins bobby.pr...@proxy.nl Cc: d...@redhat.com, freeipa-users@redhat.com Verzonden: Maandag 23 maart 2015 16:44:47 Onderwerp: Re: [Freeipa-users] 'Preauthentication

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-24 Thread Alexander Bokovoy
On Tue, 24 Mar 2015, Bobby Prins wrote: - Oorspronkelijk bericht - Van: Alexander Bokovoy aboko...@redhat.com Aan: Bobby Prins bobby.pr...@proxy.nl Cc: d...@redhat.com, freeipa-users@redhat.com Verzonden: Maandag 23 maart 2015 16:44:47 Onderwerp: Re: [Freeipa-users] 'Preauthentication

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-24 Thread Bobby Prins
- Oorspronkelijk bericht - Van: Dmitri Pal d...@redhat.com Aan: Bobby Prins bobby.pr...@proxy.nl, Alexander Bokovoy aboko...@redhat.com Cc: freeipa-users@redhat.com Verzonden: Dinsdag 24 maart 2015 14:44:42 Onderwerp: Re: [Freeipa-users] 'Preauthentication failed' with SSSD

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-24 Thread Bobby Prins
- Oorspronkelijk bericht - Van: Alexander Bokovoy aboko...@redhat.com Aan: Bobby Prins bobby.pr...@proxy.nl Cc: d...@redhat.com, freeipa-users@redhat.com Verzonden: Dinsdag 24 maart 2015 15:13:38 Onderwerp: Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-24 Thread Bobby Prins
2015 16:44:47 Onderwerp: Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode ... Can you show relevant parts of /var/log/dirsrv/slapd-EXAMPLE-CORP/access and sssd logs from IPA master (with debug_level = 10) at least in [domain], [nss], and [pam] sections. You

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-24 Thread Dmitri Pal
: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode ... Can you show relevant parts of /var/log/dirsrv/slapd-EXAMPLE-CORP/access and sssd logs from IPA master (with debug_level = 10) at least in [domain], [nss], and [pam] sections. You need to filter dirsrv logs by connection

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-24 Thread Jakub Hrozek
2015 16:44:47 Onderwerp: Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode ... Can you show relevant parts of /var/log/dirsrv/slapd-EXAMPLE-CORP/access and sssd logs from IPA master (with debug_level = 10) at least in [domain], [nss], and [pam] sections. You

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-24 Thread Bobby Prins
- Oorspronkelijk bericht - Van: Alexander Bokovoy aboko...@redhat.com Aan: Bobby Prins bobby.pr...@proxy.nl Cc: d...@redhat.com, freeipa-users@redhat.com Verzonden: Dinsdag 24 maart 2015 17:23:08 Onderwerp: Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-24 Thread Alexander Bokovoy
: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode ... Can you show relevant parts of /var/log/dirsrv/slapd-EXAMPLE-CORP/access and sssd logs from IPA master (with debug_level = 10) at least in [domain], [nss], and [pam] sections. You need to filter dirsrv logs by connection

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-24 Thread Bobby Prins
maart 2015 15:13:38 Onderwerp: Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode On Tue, 24 Mar 2015, Bobby Prins wrote: - Oorspronkelijk bericht - Van: Alexander Bokovoy aboko...@redhat.com Aan: Bobby Prins bobby.pr...@proxy.nl Cc: d...@redhat.com

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-24 Thread Bobby Prins
On Mar 24, 2015, at 18:42, Alexander Bokovoy aboko...@redhat.com wrote: On Tue, 24 Mar 2015, Bobby Prins wrote: The inability to login is reported in about the same time as the number of seconds you would find in the etime= field of the RESULT line. I checked the Common AD provider

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-24 Thread Dmitri Pal
Onderwerp: Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode ... Can you show relevant parts of /var/log/dirsrv/slapd-EXAMPLE-CORP/access and sssd logs from IPA master (with debug_level = 10) at least in [domain], [nss], and [pam] sections. You need to filter dirsrv

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-24 Thread Alexander Bokovoy
On Tue, 24 Mar 2015, Bobby Prins wrote: The inability to login is reported in about the same time as the number of seconds you would find in the etime= field of the RESULT line. I checked the Common AD provider issues and Troubleshooting authentication, password change and access control

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-23 Thread Alexander Bokovoy
On Mon, 23 Mar 2015, Bobby Prins wrote: On 03/20/2015 08:05 AM, Alexander Bokovoy wrote: On Fri, 20 Mar 2015, Bobby Prins wrote: On Fri, 20 Mar 2015, Sumit Bose wrote: On Fri, Mar 20, 2015 at 11:44:43AM +0100, Bobby Prins wrote: On Thu, Mar 19, 2015 at 04:46:44PM +0100, Bobby Prins wrote:

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-23 Thread Bobby Prins
On 03/20/2015 08:05 AM, Alexander Bokovoy wrote: On Fri, 20 Mar 2015, Bobby Prins wrote: On Fri, 20 Mar 2015, Sumit Bose wrote: On Fri, Mar 20, 2015 at 11:44:43AM +0100, Bobby Prins wrote: On Thu, Mar 19, 2015 at 04:46:44PM +0100, Bobby Prins wrote: Hi there, I'm currently trying to use

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-20 Thread Bobby Prins
On Thu, Mar 19, 2015 at 04:46:44PM +0100, Bobby Prins wrote: Hi there, I'm currently trying to use the 'AD Trust for Legacy Clients' freeIPA setup (described here: http://www.freeipa.org/images/0/0d/FreeIPA33-legacy-clients.pdf) to be able to autenticate AIX 7.1 clients against an AD

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-20 Thread Bobby Prins
On Fri, 20 Mar 2015, Sumit Bose wrote: On Fri, Mar 20, 2015 at 11:44:43AM +0100, Bobby Prins wrote: On Thu, Mar 19, 2015 at 04:46:44PM +0100, Bobby Prins wrote: Hi there, I'm currently trying to use the 'AD Trust for Legacy Clients' freeIPA setup (described here:

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-20 Thread Sumit Bose
On Fri, Mar 20, 2015 at 11:44:43AM +0100, Bobby Prins wrote: On Thu, Mar 19, 2015 at 04:46:44PM +0100, Bobby Prins wrote: Hi there, I'm currently trying to use the 'AD Trust for Legacy Clients' freeIPA setup (described here:

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-20 Thread Alexander Bokovoy
On Fri, 20 Mar 2015, Sumit Bose wrote: On Fri, Mar 20, 2015 at 11:44:43AM +0100, Bobby Prins wrote: On Thu, Mar 19, 2015 at 04:46:44PM +0100, Bobby Prins wrote: Hi there, I'm currently trying to use the 'AD Trust for Legacy Clients' freeIPA setup (described here:

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-20 Thread Alexander Bokovoy
On Fri, 20 Mar 2015, Bobby Prins wrote: On Fri, 20 Mar 2015, Sumit Bose wrote: On Fri, Mar 20, 2015 at 11:44:43AM +0100, Bobby Prins wrote: On Thu, Mar 19, 2015 at 04:46:44PM +0100, Bobby Prins wrote: Hi there, I'm currently trying to use the 'AD Trust for Legacy Clients' freeIPA setup

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-20 Thread Dmitri Pal
On 03/20/2015 08:05 AM, Alexander Bokovoy wrote: On Fri, 20 Mar 2015, Bobby Prins wrote: On Fri, 20 Mar 2015, Sumit Bose wrote: On Fri, Mar 20, 2015 at 11:44:43AM +0100, Bobby Prins wrote: On Thu, Mar 19, 2015 at 04:46:44PM +0100, Bobby Prins wrote: Hi there, I'm currently trying to use

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-19 Thread Sumit Bose
On Thu, Mar 19, 2015 at 04:46:44PM +0100, Bobby Prins wrote: Hi there, I'm currently trying to use the 'AD Trust for Legacy Clients' freeIPA setup (described here: http://www.freeipa.org/images/0/0d/FreeIPA33-legacy-clients.pdf) to be able to autenticate AIX 7.1 clients against an AD

Re: [Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-19 Thread Bobby Prins
On Thu, Mar 19, 2015 at 04:46:44PM +0100, Bobby Prins wrote: Hi there, I'm currently trying to use the 'AD Trust for Legacy Clients' freeIPA setup (described here: http://www.freeipa.org/images/0/0d/FreeIPA33-legacy-clients.pdf) to be able to autenticate AIX 7.1 clients against an AD

[Freeipa-users] 'Preauthentication failed' with SSSD in ipa_server_mode

2015-03-19 Thread Bobby Prins
Hi there, I'm currently trying to use the 'AD Trust for Legacy Clients' freeIPA setup (described here: http://www.freeipa.org/images/0/0d/FreeIPA33-legacy-clients.pdf) to be able to autenticate AIX 7.1 clients against an AD domain using LDAP. After the trust was created all seems to work well