[SSSD-users] Re: sshPublicKey is not available for kolbr...@example.com - but it is

2020-03-25 Thread Kevin Olbrich
OK, I've added "ldap_user_ssh_public_key" and checked my ldap class permissions via ADSI-Edit. Instead of using the GUI, I've added the attribute and class using LDIF. Security was empty but inheritance was enabled. I disabled, enabled and saved it. Now there are entries under security. Indeed,

[SSSD-users] Re: sshPublicKey is not available for kolbr...@example.com - but it is

2020-03-25 Thread Sumit Bose
On Wed, Mar 25, 2020 at 03:14:40PM +0100, Kevin Olbrich wrote: > Hi! > > I'm new to SSSD and I try to connect SSSD to my AD to manage SSH access. > I set up the attribute and class on AD schema master and I can fill > keys using ADUC. > I've also enabled the checkbox for GC sync. My client system

[SSSD-users] Re: sshPublicKey is not available for kolbr...@example.com - but it is

2020-03-25 Thread Lukas Slebodnik
On (25/03/20 15:14), Kevin Olbrich wrote: >Hi! > >I'm new to SSSD and I try to connect SSSD to my AD to manage SSH access. >I set up the attribute and class on AD schema master and I can fill >keys using ADUC. >I've also enabled the checkbox for GC sync. My client system is debian buster. > >I've

[SSSD-users] sshPublicKey is not available for kolbr...@example.com - but it is

2020-03-25 Thread Kevin Olbrich
Hi! I'm new to SSSD and I try to connect SSSD to my AD to manage SSH access. I set up the attribute and class on AD schema master and I can fill keys using ADUC. I've also enabled the checkbox for GC sync. My client system is debian buster. I've joined a machine this way: realm discover

[SSSD-users] Re: SSSD and PKI: capability of checking trust/validation/revocation

2020-03-25 Thread Sumit Bose
On Wed, Mar 25, 2020 at 10:49:55AM -, Hristina Marosevic wrote: > > On Tue, Mar 24, 2020 at 02:20:17PM -, Hristina Marosevic wrote: > > > > Hi, > > > > did you change the 'ca_db' option in sssd.conf? If looks like a wrong > > path '/home/oracle' is used for the NSS database. > > > >

[SSSD-users] Re: SSSD and PKI: capability of checking trust/validation/revocation

2020-03-25 Thread Hristina Marosevic
> On Tue, Mar 24, 2020 at 02:20:17PM -, Hristina Marosevic wrote: > > Hi, > > did you change the 'ca_db' option in sssd.conf? If looks like a wrong > path '/home/oracle' is used for the NSS database. > > bye, > Sumit Hello, It was anold configuration - thank you for noticing! After