In fedora 26 where should sssd.conf live? /etc/sssd/ or /etc/sssd/conf.d/ ??
I set debug_level = 5 and all I see is [sssd[nss]] [sss_dp_get_reply] (0x0010): The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal] On Tue, Aug 1, 2017 at 3:51 PM, Louis Garcia <[email protected]> wrote: > Yes I did mean files. I fix it, restarted sssd and logged back in with the > same problem. My client still authenticates to pam not kerberos. > > Can it be something with authconfig? > > On Tue, Aug 1, 2017 at 3:32 PM, Jakub Hrozek <[email protected]> wrote: > >> On Tue, Aug 01, 2017 at 03:02:04PM -0400, Louis Garcia wrote: >> > I've setup a kdc server and I'm able to kinit from my client and get a >> > ticket for ssh, nfs. I am having trouble setting up sssd so I can skip >> > kinit. I only setup a kerberos server do I also need a ldap server? >> > >> > This is how I configured PAM: #authconfig --enablesssd --enablesssdauth >> > --enablekrb5 --update >> > >> > I'm sure not one line of my sssd.conf file is right. >> > >> > [sssd] >> > services = nss, pam >> > config_file_version = 2 >> > reconnection_retries = 3 >> > sbus_timeout = 30 >> > >> > [nss] >> > filter_groups = root >> > filter_users = root >> > >> > [pam] >> > reconnection_retries = 3 >> > offline_credentials_expiration = 2 >> > offline_failed_login_attempts = 3 >> > offline_failed_login_delay = 5 >> > >> > [domain/kerberos] >> > id_provider = proxy >> > proxy_lib_name = false >> >> false is almost certainly true, did you mean files? >> >> > >> > auth_provider = krb5 >> > chpass_provider = krb5 >> > krb5_realm = MONTCLAIRE.LOCAL >> > krb5_server = panther.montclaire.local >> > >> > cache_credentials = True >> > krb5_store_password_if_offline = True >> >> > _______________________________________________ >> > sssd-users mailing list -- [email protected] >> > To unsubscribe send an email to [email protected] >> _______________________________________________ >> sssd-users mailing list -- [email protected] >> To unsubscribe send an email to [email protected] >> > >
_______________________________________________ sssd-users mailing list -- [email protected] To unsubscribe send an email to [email protected]
