[SSSD-users] Re: [Freeipa-users] Re: FreeIPA / SSSD and IPV6

2019-12-06 Thread TomK
On 12/6/2019 10:51 AM, TomK wrote: On 12/4/2019 11:16 AM, Alexander Bokovoy via FreeIPA-users wrote: On ke, 04 joulu 2019, Stephen John Smoogen via FreeIPA-users wrote: On Tue, 3 Dec 2019 at 21:43, TomK via FreeIPA-users wrote: Hey All, Does FreeIPA fully support IPV6 or are there corner

[SSSD-users] Re: [Freeipa-users] Re: FreeIPA and IPV6

2019-12-06 Thread TomK
On 12/4/2019 11:16 AM, Alexander Bokovoy via FreeIPA-users wrote: On ke, 04 joulu 2019, Stephen John Smoogen via FreeIPA-users wrote: On Tue, 3 Dec 2019 at 21:43, TomK via FreeIPA-users wrote: Hey All, Does FreeIPA fully support IPV6 or are there corner cases and limitations that could make

[SSSD-users] Re: How to have a dynamic ldap_default_bind_dn value in sssd.conf?

2019-12-06 Thread Sumit Bose
On Fri, Dec 06, 2019 at 01:11:26PM +0100, Christian Lamparter wrote: > On the 2019-11-25 at 11:41 Oscar Torrente wrote: > > Ok. So what you suggest is applying an ACI to all needed attributes for all > > users/groups nodes in LDAP directory to give this special account the read > > permission

[SSSD-users] Re: Use the users Kerberos credentials with 'ldap_sasl_mech = gssapi'

2019-12-06 Thread Jasper Siepkes
> I don't think so. I have had problems with just sshd only when trying do > clever things just because ssh looks up the user before trying to login. Same here. I don't think this should be too big of a problem. It might not work for a default PAM stack (as John points out in another message)

[SSSD-users] Re: Use the users Kerberos credentials with 'ldap_sasl_mech = gssapi'

2019-12-06 Thread Jasper Siepkes
> I don't think so. I have had problems with just sshd only when trying do > clever things just because ssh looks up the user before trying to login. I don't think so too. I think this should be doable. ___ sssd-users mailing list --

[SSSD-users] Re: Can SSSD sort the autofs map

2019-12-06 Thread Oguzhan Eris
Thank you for thinking about this. I will investigate the submounts you suggested as well as the NFS junctions. I am on the latest centos/rhel 7.x line On Fri, Dec 6, 2019, 2:39 AM Ian Kent wrote: > On Thu, 2019-12-05 at 23:09 -0500, Oguzhan Eris wrote: > > Thanks for the reply. > > My file

[SSSD-users] Re: How to have a dynamic ldap_default_bind_dn value in sssd.conf?

2019-12-06 Thread Christian Lamparter
On the 2019-11-25 at 11:41 Oscar Torrente wrote: Ok. So what you suggest is applying an ACI to all needed attributes for all users/groups nodes in LDAP directory to give this special account the read permission over them , isn't? I should obfuscate its password in sssd.conf file, though, but

[SSSD-users] Re: Use the users Kerberos credentials with 'ldap_sasl_mech = gssapi'

2019-12-06 Thread Joakim Tjernlund
On Fri, 2019-12-06 at 12:25 +0100, Sumit Bose wrote: > CAUTION: This email originated from outside of the organization. Do not click > links or open attachments unless you recognize the sender and know the > content is safe. > > > On Fri, Dec 06, 2019 at 11:15:46AM -, Jasper Siepkes wrote:

[SSSD-users] Re: Use the users Kerberos credentials with 'ldap_sasl_mech = gssapi'

2019-12-06 Thread John Hodrien
On Fri, 6 Dec 2019, Jasper Siepkes wrote: Hi, Thanks for the reply and sorry I missed the other question (my Google-foo is apparently a bit weak today ;-). To cut it short, this is not possible because many login programs need to information about the user before the password or other

[SSSD-users] Re: Use the users Kerberos credentials with 'ldap_sasl_mech = gssapi'

2019-12-06 Thread Sumit Bose
On Fri, Dec 06, 2019 at 11:15:46AM -, Jasper Siepkes wrote: > Hi, > > Thanks for the reply and sorry I missed the other question (my Google-foo is > apparently a bit weak today ;-). > > > To cut it short, this is not possible because many login programs need to > > information about the

[SSSD-users] Re: Use the users Kerberos credentials with 'ldap_sasl_mech = gssapi'

2019-12-06 Thread Jasper Siepkes
Hi, Thanks for the reply and sorry I missed the other question (my Google-foo is apparently a bit weak today ;-). > To cut it short, this is not possible because many login programs need to > information about the user before the password or other credentials are available. Would you folks be

[SSSD-users] Re: Use the users Kerberos credentials with 'ldap_sasl_mech = gssapi'

2019-12-06 Thread Sumit Bose
On Fri, Dec 06, 2019 at 10:26:13AM -, Jasper Siepkes wrote: > Hi all! > > As far as I can tell the option 'ldap_sasl_mech = gssapi' in sssd.conf always > makes LDAP use a Kerberos keytab for LDAP searches. As far as I can tell > there is no way to use the users Kerberos credentials? I think

[SSSD-users] Use the users Kerberos credentials with 'ldap_sasl_mech = gssapi'

2019-12-06 Thread Jasper Siepkes
Hi all! As far as I can tell the option 'ldap_sasl_mech = gssapi' in sssd.conf always makes LDAP use a Kerberos keytab for LDAP searches. As far as I can tell there is no way to use the users Kerberos credentials? I think this design comes from how Windows does it with AD? I would like to use

[SSSD-users] Re: install sssd version 2

2019-12-06 Thread Sumit Bose
On Fri, Dec 06, 2019 at 09:09:44AM +0100, Jannis Mann wrote: > Hi, > I want to install sssd version 2. > Are there any limitations? I've installed sssd on suse, ubuntu and centos Hi, some rarely used options were removed in sssd-2.x but otherwise there should be no other limitations. > with the

[SSSD-users] install sssd version 2

2019-12-06 Thread Jannis Mann
Hi, I want to install sssd version 2. Are there any limitations? I've installed sssd on suse, ubuntu and centos with the latest repos and only get sssd version 1.16 How can I upgrade to version 2? Thank you! Jannis ___ sssd-users mailing list --