Hmmm,
Looks like a bug in 1.10?
My search looks different:
(Wed Sep 18 08:47:17 2013) [sssd[be[vendavo.com]]] [sdap_get_generic_ext_step]
(0x0400): calling ldap_search_ext with
[((nisMapName=auto.master)(objectclass=nisMap))][CN=CZ,CN=NIS,DC=vendavo,DC=com].
I am using AD mapping, but it
On 18/09/13 07:59, Ondrej Valousek wrote:
Hmmm,
Looks like a bug in 1.10?
My search looks different:
(Wed Sep 18 08:47:17 2013) [sssd[be[vendavo.com]]] [sdap_get_generic_ext_step]
(0x0400): calling ldap_search_ext with
Right,
Obviously automounter parses /etc/sysconfig/autofs as well - so if you screw up
your autofs config file, you are finished.
I thought auto.master is hard encoded in sssd.
Interesting...
Ondrej
From: Rowland Penny [repenny241...@gmail.com]
Sent:
On Tue, Sep 17, 2013 at 01:50:15PM +, a t wrote:
Date: Mon, 16 Sep 2013 15:59:09 +0200
From: jhro...@redhat.com
To: sssd-users@lists.fedorahosted.org
Subject: Re: [SSSD-users] authenticating against all sub-domains in AD
forest
On Mon, Sep 16, 2013 at 01:45:17PM +, a t
On 18/09/13 09:47, Jakub Hrozek wrote:
On Wed, Sep 18, 2013 at 08:46:31AM +0100, Rowland Penny wrote:
On 18/09/13 07:59, Ondrej Valousek wrote:
Hmmm,
Looks like a bug in 1.10?
My search looks different:
(Wed Sep 18 08:47:17 2013) [sssd[be[vendavo.com]]] [sdap_get_generic_ext_step]
(0x0400):
On Wed, Sep 18, 2013 at 10:02:46AM +0100, Rowland Penny wrote:
The only change I made was in /etc/default/autofs, I changed:
MASTER_MAP_NAME=OU=auto.master,OU=automount,DC=home,DC=lan
To:
Ah, I know what's going on, sorry for the confusion.
tl;dr - your config is correct.
Date: Wed, 18 Sep 2013 10:34:03 +0200
From: jhro...@redhat.com
To: sssd-users@lists.fedorahosted.org
Subject: Re: [SSSD-users] authenticating against all sub-domains in AD forest
On Tue, Sep 17, 2013 at 01:50:15PM +, a t wrote:
Date: Mon, 16 Sep 2013 15:59:09 +0200
Ok : I found where was my mistake :
This is wrong:
ldap_user_ssh_public_key = True
This is the right config :
ldap_user_ssh_public_key = sshPublicKey
Now it works !
Thanks to Mathieu :
http://blog.mlemoine.name/2013/04/11/centralizing-server-access.html
And all
Best,
---
Olivier
