On (02/08/17 09:43), Jakub Hrozek wrote:
>On Tue, Aug 01, 2017 at 04:46:32PM -0400, Louis Garcia wrote:
>> In fedora 26 where should sssd.conf live? /etc/sssd/  or  /etc/sssd/conf.d/
>> ??
>
>Ah, in fedora-26, this setup might be a bit more problematic because
>sssd by default serves files already. Can you try something like this
>please (untested):
>
IMHO it is not more problematic it's simpler :-)

>[sssd]
>services = nss, pam
># this was missing in your original config
>domains = kerberos
>
>[nss]
>filter_groups = root
>filter_users = root
>
>[pam]
>offline_credentials_expiration = 2
>offline_failed_login_attempts = 3
>offline_failed_login_delay = 5
>
>[domain/kerberos]
># files provider instead of proxy
>id_provider = files
>
>auth_provider = krb5
>chpass_provider = krb5
>krb5_realm = MONTCLAIRE.LOCAL
>krb5_server = panther.montclaire.local
>
>cache_credentials = True
>krb5_store_password_if_offline = True

If that configuration does not help then please follow our troubleshooting wiki
https://docs.pagure.org/SSSD.sssd/users/troubleshooting.html#troubleshooting-authentication-password-change-and-access-control

LS
_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to