Re: [Freeipa-users] Problem with AD authentication after updating to 7.2 OS server

2015-11-30 Thread Morgan Marodin
I've found the problem, using DEBUG3 into SSH service: - Nov 30 08:52:47 myserver sshd[9639]: debug1: Unspecified GSS failure. Minor code may provide more information\nClock skew too great\n Nov 30 08:52:47 myserver ssh

Re: [Freeipa-users] Problem with AD authentication after updating to 7.2 OS server

2015-11-27 Thread Sumit Bose
On Fri, Nov 27, 2015 at 06:16:51PM +0100, Morgan Marodin wrote: > Yes: > -- > # ls -l /var/lib/sss/pubconf/krb5.include.d/ > total 8 > -rw-r--r-- 1 root root 208 Nov 27 17:37 domain_realm_ipa_mydomain_com > -rw-r--r-- 1 root root 118 Nov 27 17:37 localauth_plugin > > So what could I try to do?

Re: [Freeipa-users] Problem with AD authentication after updating to 7.2 OS server

2015-11-27 Thread Morgan Marodin
Yes: -- # ls -l /var/lib/sss/pubconf/krb5.include.d/ total 8 -rw-r--r-- 1 root root 208 Nov 27 17:37 domain_realm_ipa_mydomain_com -rw-r--r-- 1 root root 118 Nov 27 17:37 localauth_plugin So what could I try to do? Thanks, Morgan 2015-11-27 17:47 GMT+01:00 Sumit Bose : > On Fri, Nov 27, 2015

Re: [Freeipa-users] Problem with AD authentication after updating to 7.2 OS server

2015-11-27 Thread Sumit Bose
On Fri, Nov 27, 2015 at 05:35:42PM +0100, Morgan Marodin wrote: > Hi Sumit. > > I don't know why, but now kerberos ticket authentication is working on 6.7 > clients. > On 7.2 clients now password authetications with Active Directory > credentials is working ... but not with kerberos ticket. This

Re: [Freeipa-users] Problem with AD authentication after updating to 7.2 OS server

2015-11-27 Thread Morgan Marodin
Hi Sumit. I don't know why, but now kerberos ticket authentication is working on 6.7 clients. On 7.2 clients now password authetications with Active Directory credentials is working ... but not with kerberos ticket. There are my 7.2 client SSSD logs: --

Re: [Freeipa-users] Problem with AD authentication after updating to 7.2 OS server

2015-11-27 Thread Sumit Bose
On Fri, Nov 27, 2015 at 04:31:49PM +0100, Morgan Marodin wrote: > Hi everyone. > > After updating my FreeIPA server to 7.2 OS version (it's a RHEL like > distribution) I've some problems authenticating with Active Directory > credentials. > > Testing it on 6.7 OS clients it works using Windows pa

[Freeipa-users] Problem with AD authentication after updating to 7.2 OS server

2015-11-27 Thread Morgan Marodin
Hi everyone. After updating my FreeIPA server to 7.2 OS version (it's a RHEL like distribution) I've some problems authenticating with Active Directory credentials. Testing it on 6.7 OS clients it works using Windows password, but using ticket kerberos it doesn't work. Testing it on 7.2 client i