Hi Spike,

thanks a lot for your findings ! I appreciate your effort.

I also played around with the TRUSTED_FOR_DELEGATION flag on the machine 
account, and yes
it looks like the behaviour is consistent.
( I had a case where I got a TGT without the TRUSTED_FOR_DELEGATION flag set on 
the machine account,
  but I'm not sure if sssd and sshd where restarted correctly.. )

So, that should be it...  I now have to get to the Active Directory department 
on my corporate environment
and ask them to set the flag for me, because it seems that only Administrator 
can set the flag ( if not customized ),
even if you ( a non-Administrator account owns the machine account...).

Thanks everybody for all the help provided !

Have a nice day !
_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to