On su, 22 heinä 2018, Николай Савельев via FreeIPA-users wrote:
> From: Jakub Hrozek <jhrozek(a)redhat.com>
>
> Are you sure sssd is not logging you offline?
>
> sssctl domain-status can tell you the status of the domains..
>
> ------------------------------
Yes, I sure.
I tried to login in ipa server and client.
I could with old password, but coludn't with new.
When you are using trust to AD
*all* authentication of AD users is
performed by AD DCs. IPA masters are not involved at all. So you need to
look at AD side for that.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland