thank you! that was it
From: Simpson Lachlan
To: pgb205 ; Sumit Bose
Cc: Freeipa-users
Sent: Tuesday, July 19, 2016 7:30 PM
Subject: RE: Re: [Freeipa-users] Unable to ssh after establishing trust
#yiv1956000891 #yiv1956000891 -- _filtered #yiv1956000891
{font-family:Helvetica
From: freeipa-users-boun...@redhat.com
[mailto:freeipa-users-boun...@redhat.com] On Behalf Of pgb205
Sent: Wednesday, 20 July 2016 5:28 AM
To: Sumit Bose
Cc: Freeipa-users
Subject: Re: [Freeipa-users] Unable to ssh after establishing trust
well...I'm not sure what I changed, if anything,
smith@ADDOMAIN.COMor better yetjsmith --without specifying the domain name.
How can this be accomplished?
thanks
From: Sumit Bose
To: pgb205
Cc: Freeipa-users
Sent: Tuesday, July 19, 2016 3:33 AM
Subject: Re: [Freeipa-users] Unable to ssh after establishing trust
On Mon, Jul 18, 20
t; thanks
> ━━━━━━━━━━━━━━━━━━━
> From: Sumit Bose
> To: pgb205
> Cc: Sumit Bose ; Freeipa-users
> Sent: Wednesday, July 13, 2016 5:43 AM
> Subject: Re: [Freeipa-users] Unable to ssh after establishing trust
>
━━━━━━━━━━━━━━━━━━━━
> From: Sumit Bose
> To: pgb205
> Cc: Sumit Bose ; Freeipa-users
> Sent: Wednesday, July 13, 2016 5:43 AM
> Subject: Re: [Freeipa-users] Unable to ssh after establishing trust
>
> On Tue, Jul 12, 2016 at 06:40:22PM +0000,
Bose
To: pgb205
Cc: Sumit Bose ; Freeipa-users
Sent: Wednesday, July 13, 2016 5:43 AM
Subject: Re: [Freeipa-users] Unable to ssh after establishing trust
On Tue, Jul 12, 2016 at 06:40:22PM +, pgb205 wrote:
> +freeipa-users list
>
> From: pgb205
> To: Sumit Bose
> S
On Tue, Jul 12, 2016 at 06:40:22PM +, pgb205 wrote:
> +freeipa-users list
>
> From: pgb205
> To: Sumit Bose
> Sent: Tuesday, July 12, 2016 2:12 PM
> Subject: Re: [Freeipa-users] Unable to ssh after establishing trust
>
> Sumit, thanks for replying
&g
+freeipa-users list
From: pgb205
To: Sumit Bose
Sent: Tuesday, July 12, 2016 2:12 PM
Subject: Re: [Freeipa-users] Unable to ssh after establishing trust
Sumit, thanks for replying
So the first issue is my fault, probably from when I was sanitizing logs.
our active directory
On Mon, Jul 11, 2016 at 03:46:57AM +, pgb205 wrote:
> I have successfully established trust and am able to obtain ticket granting
> ticketkinit user@AD_DOMAIN.COMI can also do kinit admin@IPA_DOMAIN.COMssh
> admin@IPA_DOMAIN.COM also works
> however, ssh user@AD_DOMAIN.COM or user@ad_domain.c
Have you set up the external group and internal group as required in IPA?
The server you are trying to log into - you have added this to the IPA
server using ipa-client-install?
When you are logged into the server that you want to login to as root (or
local user), does `id user@ad_domain.com` giv
I have successfully established trust and am able to obtain ticket granting
ticketkinit user@AD_DOMAIN.COMI can also do kinit admin@IPA_DOMAIN.COMssh
admin@IPA_DOMAIN.COM also works
however, ssh user@AD_DOMAIN.COM or user@ad_domain.com fails
I have checked that there are no hbac rules other then
11 matches
Mail list logo
