Hello,
Thank you for your fast answer. My my krb5.conf seems correct, based on info you gave me :
includedir /etc/krb5.conf.d/ includedir /var/lib/sss/pubconf/krb5.include.d/
[logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log
[libdefaults] default_realm = HOAH.CH dns_lookup_realm = false dns_lookup_kdc = true rdns = false ticket_lifetime = 24h forwardable = true udp_preference_limit = 0
[realms] HOAH.CH = { kdc = ipa.hoah.ch:88 master_kdc = ipa.hoah.ch:88 admin_server = ipa.hoah.ch:749 default_domain = hoah.ch pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem }
[domain_realm] .hoah.ch = HOAH.CH hoah.ch = HOAH.CH ipa.hoah.ch = HOAH.CH
[dbmodules] HOAH.CH = { db_library = ipadb.so }
[plugins] certauth = { module = ipakdb:kdb/ipadb.so enable_only = ipakdb }
Do you have another hint ?