[SSSD] Re: Allowing local ssh login when using sssd

2018-03-20 Thread Richard Sharpe
On Tue, Mar 20, 2018 at 1:16 AM, Sumit Bose wrote: > On Mon, Mar 19, 2018 at 04:45:12PM -0700, Richard Sharpe wrote: >> Hi folks, >> >> It seems that once we are joined to a domain, ssh logins with local >> accounts no longer work. When we unjoin from the domain, they start >> working again. >> >>

[SSSD] Re: KCM talking to secrets over REST API (or not)

2018-03-20 Thread Robbie Harwood
Jakub Hrozek writes: >> On 20 Mar 2018, at 13:51, Simo Sorce wrote: >> On Tue, 2018-03-20 at 12:54 +0100, Jakub Hrozek wrote: On 13 Mar 2018, at 14:07, Jakub Hrozek wrote: > If debuggability is the only issue have you thought about adding > an option to dump all requests and

[SSSD] Re: KCM talking to secrets over REST API (or not)

2018-03-20 Thread Simo Sorce
On Tue, 2018-03-20 at 20:36 +0100, Jakub Hrozek wrote: > > On 20 Mar 2018, at 13:51, Simo Sorce wrote: > > > > On Tue, 2018-03-20 at 12:54 +0100, Jakub Hrozek wrote: > > > Let me bump this thread..see some ideas inline. > > Thank you for the prompt response. YW, more inline. > > > > > > > On

[SSSD] Re: KCM talking to secrets over REST API (or not)

2018-03-20 Thread Jakub Hrozek
> On 20 Mar 2018, at 13:51, Simo Sorce wrote: > > On Tue, 2018-03-20 at 12:54 +0100, Jakub Hrozek wrote: >> Let me bump this thread..see some ideas inline. Thank you for the prompt response. >> >>> On 13 Mar 2018, at 14:07, Jakub Hrozek wrote: >>> >>> >>> On 13 Mar 2018, at 13:42, S

[SSSD] Re: Allowing local ssh login when using sssd

2018-03-20 Thread Richard Sharpe
On Tue, Mar 20, 2018 at 1:16 AM, Sumit Bose wrote: > On Mon, Mar 19, 2018 at 04:45:12PM -0700, Richard Sharpe wrote: >> Hi folks, >> >> It seems that once we are joined to a domain, ssh logins with local >> accounts no longer work. When we unjoin from the domain, they start >> working again. >> >>

[SSSD] Re: KCM talking to secrets over REST API (or not)

2018-03-20 Thread Simo Sorce
On Tue, 2018-03-20 at 12:54 +0100, Jakub Hrozek wrote: > Let me bump this thread..see some ideas inline. > > > On 13 Mar 2018, at 14:07, Jakub Hrozek wrote: > > > > > > > > > On 13 Mar 2018, at 13:42, Simo Sorce wrote: > > > > > > On Tue, 2018-03-13 at 12:05 +0100, Jakub Hrozek wrote: > > >

[SSSD] Re: KCM talking to secrets over REST API (or not)

2018-03-20 Thread Jakub Hrozek
Let me bump this thread..see some ideas inline. > On 13 Mar 2018, at 14:07, Jakub Hrozek wrote: > > > >> On 13 Mar 2018, at 13:42, Simo Sorce wrote: >> >> On Tue, 2018-03-13 at 12:05 +0100, Jakub Hrozek wrote: >>> Hi, >>> >>> last week, me, some other SSSD developers and Robbie looked at ho

[SSSD] Re: Allowing local ssh login when using sssd

2018-03-20 Thread Jakub Hrozek
> On 20 Mar 2018, at 09:16, Sumit Bose wrote: > > On Mon, Mar 19, 2018 at 04:45:12PM -0700, Richard Sharpe wrote: >> Hi folks, >> >> It seems that once we are joined to a domain, ssh logins with local >> accounts no longer work. When we unjoin from the domain, they start >> working again. >>

[SSSD] Re: Allowing local ssh login when using sssd

2018-03-20 Thread Sumit Bose
On Mon, Mar 19, 2018 at 04:45:12PM -0700, Richard Sharpe wrote: > Hi folks, > > It seems that once we are joined to a domain, ssh logins with local > accounts no longer work. When we unjoin from the domain, they start > working again. > > When not joined to a domain our sssd.conf file looks like