Hello,

today I installed 7 laptops with Ubuntu 20.04 LTS directly from ubuntu
repo. Afterwards I set up our domain and all of these  laptops have
above problem.

As far as I can tell the sssd demon does not enter offline state even
when the LAN cable is disconnected.

We have a "normal" Windows Server as domain controller I am not sure
which informations will help you there.

Here is our sssd.conf

[sssd]
services = nss, pam, ssh
config_file_version = 2
domains = REALM.LO
debug_level = 1

[domain/REALM.LO]
debug_level = 1
id_provider = ad
access_provider = ad
auth_provider = ad
krb5_store_password_if_offline = True 
enumerate = False
ignore_group_members = True
use_fully_qualified_names = False

auto_private_groups = True
cache_credentials = True

ad_gpo_access_control = permissive

krb5_server = realm.lo
krb5_realm = realm.lo

# SSH Key Login
ldap_user_extra_attrs = altSecurityIdentities:altSecurityIdentities
ldap_user_ssh_public_key = altSecurityIdentities
ldap_use_tokengroups = True

# home directory
override_homedir = /home/%d/%u
default_shell = /bin/bash


-------------------------------------------------
and our krb5.conf

[libdefaults]
    default_realm = REALM.LO
    ticket_lifetime = 24h
    renew_lifetime = 7d
    forwardable = true
    dns_lookup_realm = true
    dns_lookup_kdc = true
    rdn = true

[realms]
    REALM.LO = {
        kdc = realm.lo
        admin_server =  realm.lo
    }

[domain_realms]
    .realm.lo = REALM.LO

------------------------------------------------

I would gladly provide more informations if needed

** Changed in: sssd (Ubuntu)
       Status: Incomplete => New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1928954

Title:
  sssd not using offline credentials even no network available

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1928954/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to