On Fri, May 24, 2019 at 11:09 AM Sumit Bose <[email protected]> wrote: [snip] > > This means that the GPO based access control is used, is this what you > expected, please see ad_gpo_access_control in man sssd-ad for details. > > Can you check if using 'access_provider = permit' helps to make login > work?
access_providere = permit makes it work again! I asked our sysadmin and he told me he played with those settings a few days ago. That could explain why my setup wasn't working because he didn't do anything for the Linux boxes. I'm thinking setting back the access_provider to 'ad' and changing ad_gpo_access_control to 'permissive' would also work, I'll reply back once I test it! Thanks a lot! > > > > > I've tried making the debug_level higher. I got this in sssd.log after > > restarting the service > > > > https://gist.github.com/jpleau/fc23629c95894143a05426dc1fc54b6e > > The relevant log file here is sssd_YOUR.DOMAIN.NAME.log. > > > > > Also if I check journalctl -u sssd, I can see this: > > > > https://gist.github.com/jpleau/286c65306ebbf750d02b72b225140af6 > > There are hints that the connection to one of the AD DCs might have > failed. But details should be available in sssd_YOUR.DOMAIN.NAME.log. > > bye, > Sumit > > > > > > > > > > > > > Thanks. > > _______________________________________________ > > sssd-users mailing list -- [email protected] > > To unsubscribe send an email to [email protected] > > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > > List Archives: > > https://lists.fedorahosted.org/archives/list/[email protected] > _______________________________________________ > sssd-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] _______________________________________________ sssd-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected]
