Hello all,

I am having a very annoying problem with SSSD and AD:


I have a lab with 5 Ubuntu 16.04 LTS Desktops clients that I configured to 
authenticate with the University's Active Directory.


SSSD is configured with Samba and Kerberos 5.


All was working well when we used Ubuntu 14.04.


The Problem:


If one of the students never logged in before, or was away for more than a week 
- LightDM claims the password is incorrect - even if we know for sure it is 
correct.


We have two Active Directory domains, sometimes the same user succeeds in 
logging in, other times - not...


I am guessing it has to do with the credential cache (GPO Cache?)


  1.  Is there a way to check which domains  SSSD authenticates against, not 
read it from the local configuration?
  2.  Is there a command to manually force an enumeration - I mean, refresh the 
cache from the AD to enable a student to log in at that given time?


This problem is bugging me for more than a month! It is really frustrating....


Thanks!


Amichai.


[1502369097122_erez6.png]

עמיחי רוטמן - תומך יוניקס למעבדת הרובוטים הקוגניטיביים

הפקולטה להדסת תעשייה וניהול

_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to