Does gssproxy have anything todo with sssd? On Tue, Aug 1, 2017 at 4:46 PM, Louis Garcia <[email protected]> wrote:
> In fedora 26 where should sssd.conf live? /etc/sssd/ or > /etc/sssd/conf.d/ ?? > > I set debug_level = 5 and all I see is > > [sssd[nss]] [sss_dp_get_reply] (0x0010): The Data Provider returned an > error [org.freedesktop.sssd.Error.DataProvider.Fatal] > > > On Tue, Aug 1, 2017 at 3:51 PM, Louis Garcia <[email protected]> wrote: > >> Yes I did mean files. I fix it, restarted sssd and logged back in with >> the same problem. My client still authenticates to pam not kerberos. >> >> Can it be something with authconfig? >> >> On Tue, Aug 1, 2017 at 3:32 PM, Jakub Hrozek <[email protected]> wrote: >> >>> On Tue, Aug 01, 2017 at 03:02:04PM -0400, Louis Garcia wrote: >>> > I've setup a kdc server and I'm able to kinit from my client and get a >>> > ticket for ssh, nfs. I am having trouble setting up sssd so I can skip >>> > kinit. I only setup a kerberos server do I also need a ldap server? >>> > >>> > This is how I configured PAM: #authconfig --enablesssd >>> --enablesssdauth >>> > --enablekrb5 --update >>> > >>> > I'm sure not one line of my sssd.conf file is right. >>> > >>> > [sssd] >>> > services = nss, pam >>> > config_file_version = 2 >>> > reconnection_retries = 3 >>> > sbus_timeout = 30 >>> > >>> > [nss] >>> > filter_groups = root >>> > filter_users = root >>> > >>> > [pam] >>> > reconnection_retries = 3 >>> > offline_credentials_expiration = 2 >>> > offline_failed_login_attempts = 3 >>> > offline_failed_login_delay = 5 >>> > >>> > [domain/kerberos] >>> > id_provider = proxy >>> > proxy_lib_name = false >>> >>> false is almost certainly true, did you mean files? >>> >>> > >>> > auth_provider = krb5 >>> > chpass_provider = krb5 >>> > krb5_realm = MONTCLAIRE.LOCAL >>> > krb5_server = panther.montclaire.local >>> > >>> > cache_credentials = True >>> > krb5_store_password_if_offline = True >>> >>> > _______________________________________________ >>> > sssd-users mailing list -- [email protected] >>> > To unsubscribe send an email to [email protected] >>> osted.org >>> _______________________________________________ >>> sssd-users mailing list -- [email protected] >>> To unsubscribe send an email to [email protected] >>> >> >> >
_______________________________________________ sssd-users mailing list -- [email protected] To unsubscribe send an email to [email protected]
