On Mon, Mar 18, 2013 at 01:00:07PM +0000, Longina Przybyszewska wrote: > Thanks, your advice was helpful. > > By the way, does 'default_realm' reference in /etc/krb5.conf is for finding > realm > for users AND hosts? > > [libdefaults] > > .. > default_realm = C.MY.DOMAIN > > > If authentication is against AD+Krb, is there difference between 'ad' and > 'krb5' providers in options: > access_provider =
Yes, this is different, access_provider=ad checks in LDAP if the account is disabled or not. If you were using access_provider=krb5 previously, you should keep using that option, it should just work. I checked the sssd-ad man page and realized this is not documented properly. So I filed: https://fedorahosted.org/sssd/ticket/1841 > auth_provider = > chpass_provider = There is no difference in behaviour of these providers between krb5 and ad. _______________________________________________ sssd-users mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/sssd-users
