Thanks. I get it finally working!! : Ubuntu-Quantal sssd+ad_provider+NFSv4 - :-)) but still have some issues: 1. Ticket expires after 10 hours - I run msktutil (application for joining linux to AD and adding principals to the account and some more) daily in crontab to prevent ticket expiration - maybe this is not necessary? Anyway, I ends having to manually reset machine's account and create a new keytab ( it is inefficient, but haven't figured out yet another way) How does sssd renew tickets if machine was offline more then 10 hours?
2. To get rid off listing of tens of group at login, I use the option: ldap_group_member = uniqueMember It works during login (no more long list, and login delay), but doesn't work when changing personality with 'su -' (again long list of numbers+ login delay) Best regards Longina -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Jakub Hrozek Sent: 22. november 2012 17:55 To: [email protected] Subject: Re: [SSSD-users] problems sssd-1.9.2 On Thu, Nov 15, 2012 at 09:43:39AM +0000, Longina Przybyszewska wrote: > > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Jakub > Hrozek > Sent: 13. november 2012 17:38 > To: [email protected] > Subject: Re: [SSSD-users] problems sssd-1.9.2 > > On Tue, Nov 13, 2012 at 03:40:14PM +0000, Longina Przybyszewska wrote: > > > > > > -----Original Message----- > > From: [email protected] > > [mailto:[email protected]] On Behalf Of > > Jakub Hrozek > > Sent: 13. november 2012 14:58 > > To: [email protected] > > Subject: Re: [SSSD-users] problems sssd-1.9.2 > > > > On Tue, Nov 13, 2012 at 12:44:45PM +0000, Longina Przybyszewska wrote: > > > Hi, > > > I try sssd-1.9.2 on Ubuntu-Quantal with ad-provider. > > > You might also be interested in the automounter integration, although I'm not > sure that piece of functionality had been backported to Ubuntu yet. The > Ubuntu automounter maintainer would know best. > > Oh, yes - how stable is automounter integration in the latest stable SSSD? > Is I enough to use autofs-5 - or does it need more integration with some SSSD > moduls/libraries? I think the sss support was introduced in autofs 5.0.6, at least in Fedora. I'm actually not quite sure about autofs upstream. You need to look for the lookup_sss.so module. > > Until I am lucky to get new packages from Ubuntu maintainers - can I use > nsswitch pointing to auto.home maps - would it work with SSSD? The SSSD integration is provided by the lookup_sss.so module, which is able to talk to the autofs responder process of the SSSD. If your distribution doesn't provide that module, you should still be able to fall back to the LDAP lookups. You just won't be able to leverage the unified configuration in sssd.conf and caching of the maps. _______________________________________________ sssd-users mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/sssd-users _______________________________________________ sssd-users mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/sssd-users
