On Thu, 2014-06-19 at 16:08 +0200, Longina Przybyszewska wrote: > Log file d7 as attachment. > > root@skywalker:/tmp# cat /etc/sssd/sssd.conf > [nss] > debug_level = 9 > filter_groups = root > filter_users = > root,lightdm,ldap,named,avahi,haldaemon,dbus,radvd,tomcat,radiusd,news,mailman,nscd > > [sssd] > debug_level = 6 > domains =nat.c.sdu.dk > config_file_version = 2 > services = nss, pam > > [domain/nat.c.sdu.dk] > debug_level = 7 > ad_domain = nat.c.sdu.dk > krb5_realm = NAT.C.SDU.DK > realmd_tags = manages-system joined-with-samba > cache_credentials = True > id_provider = ad > auth_provider = ad > access_provider = ad > krb5_store_password_if_offline = True > default_shell = /bin/bash > ldap_id_mapping = False > use_fully_qualified_names = True > fallback_homedir = /home/%d/%u > # > dyndns_update = true
Your keytab has DOMAIN.ORG as the realm. Your log has NAT.DOMAIN.ORG And your sssd.conf has: NAT.C.SDU.DK What is the realtionship between the realms? _______________________________________________ sssd-users mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/sssd-users
